THREATOPS
THREAT OPSThreat News › CVE-2026-86465: Apache Airflow Akeyless provider: Akeyless secrets backend: team-scope guard bypass via user-controlled key

CVE-2026-86465: Apache Airflow Akeyless provider: Akeyless secrets backend: team-scope guard bypass via user-controlled key

medoss_secPublished 2026-09-15

<p>Posted by Vincent Beck on Sep 15</p>Severity: moderate <br /> <br /> Affected versions:<br /> <br /> - Apache Airflow Akeyless provider (apache-airflow-providers-akeyless) before 0.3.1<br /> <br /> Description:<br /> <br /> Apache Airflow Akeyless provider: the Akeyless secrets backend&apos;s team-scope guard can be bypassed with a <br /> user-controlled key. In a multi-team deployment, a Dag a

Indicators of compromise

Original source: https://seclists.org/oss-sec/2026/q3/796