CVE-2026-4454: Airflow Azure AD Auth Bypass via Missing Issuer/Audience Validation

github.com 2026-09-09 查看中文 →

Security Advisory CVE-2026-4454 High Apache

Affected:

Apache Airflow with FAB auth manager and Azure AD authentication enabled (all versions prior to the fix)

Referenced CVEs: CVE-2026-75156

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.