CVE-2026-86467: Apache Airflow Amazon provider: AWS auth manager: SAML login CSRF logs users into the attacker's account

As cited

Copy frozen at 2026-10-19 22:33 UTC (site build).

vulnerabilities

CVE-2026-86467: Apache Airflow Amazon provider: AWS auth manager: SAML login CSRF logs users into the attacker's account

Apache Airflow Amazon provider before version 9.38.0 contains a CSRF vulnerability in its AWS authentication manager's SAML login flow. The vulnerability allows an unauthenticated attacker to log a victim into the attacker's account by exploiting the failure to bind the authentication response to the originating browser session.

Why it matters: Organizations running vulnerable versions of Apache Airflow Amazon provider should upgrade to 9.38.0 or later to prevent account takeover attacks via SAML login hijacking.

Source published

2026-10-19 17:40 UTC

First seen by Cybersecurity Tracker

2026-10-19 21:26 UTC