CVE-2026-92228

Name of the Vulnerable Software and Affected Versions apache-airflow-providers-keycloak versions prior to 0.11.1

Description Multi-team provisioning in the Apache Airflow Keycloak provider allows every team role to have global read access to audit logs. This occurs within the attach team permissions() function. In deployments where multi-team mode is enabled using the Keycloak auth manager for team provisioning, any authenticated member of a team can access audit events belonging to other teams via the user interface or the event-log API endpoint.

Recommendations Upgrade to apache-airflow-providers-keycloak 0.11.1 or later.