THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-68868 (MEDIUM 6.5) — The Google Cloud Secret Manager secrets backend in Apache Airflow's Google provider never applied the team scope when resolving Connections and Variables: the caller's `team_name` was accepted by the backend but dropped at the internal call boundary, so every lookup resolved agai

[NVD] CVE-2026-68868 (MEDIUM 6.5) — The Google Cloud Secret Manager secrets backend in Apache Airflow's Google provider never applied the team scope when resolving Connections and Variables: the caller's `team_name` was accepted by the backend but dropped at the internal call boundary, so every lookup resolved agai

lownvdPublished 2026-08-12

CVE-2026-68868 CVSS: 6.5 MEDIUM Published: 2026-08-12T11:17:10.063

The Google Cloud Secret Manager secrets backend in Apache Airflow's Google provider never applied the team scope when resolving Connections and Variables: the caller's `team_name` was accepted by the backend but dropped at the internal call boundary, so every lookup resolved against the team-agnostic secret name. In a deployment r

MITRE ATT&CK techniques

CredentialsT1589.001

Indicators of compromise

CVE-2026-68868cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-68868