As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-92228: Apache Airflow Keycloak provider: Keycloak multi-team provisioning grants every team role global audit-log read
CVE-2026-92228 affects Apache Airflow Keycloak provider versions before 0.11.1, where the multi-team provisioning feature incorrectly granted every team role global read access to audit logs. Any authenticated team member could view other teams' audit information due to improper permission handling in the _attach_team_permissions function.
Why it matters: Organizations running Apache Airflow with Keycloak multi-team provisioning enabled face privilege escalation risk: team members can access sensitive audit logs across team boundaries, potentially revealing workflow details and credentials for other teams.
- Source published
- First seen by Cybersecurity Tracker