PT-2026-24054

CVE-2026-25604

Published

2026-03-09

Updated

2026-09-18

Description by

CVSS 3.1

5.4

Medium

MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Apache Airflow versions prior to 9.22.0

Description The AWS Auth Manager in Apache Airflow did not verify the origin of SAML authentication against the actual instance URL, relying instead on information provided by the client. This allowed for potential access to different instances with varying access controls by reusing SAML responses from other instances.

Recommendations Upgrade to version 9.22.0 of the AWS Auth Manager provider.

Exploitability

Exploit

Fix

Impacts

Researchers

Sungwuk Jung

Vendors

Affected products

Weakness enumeration

CWE-346: Origin Validation Error

Related identifiers