https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 21 Oct 2026 15:54:12 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-86467 <p>Apache Airflow Amazon provider: the AWS auth manager&#39;s SAML login flow does not bind the authentication response to the browser that began it. The login handler discards the AuthnRequest ID and the callback validates the assertion without requiring a matching InResponseTo, so an unauthenticated attacker who can cause a victim to load a page can complete a SAML login in the victim&#39;s browser using the attacker&#39;s own assertion, silently logging the victim into the attacker&#39;s Airflow account. Subsequent work the victim performs lands in a session the attacker controls.</p> <p>Affects deployments using the AWS auth manager with SAML authentication. The victim needs only to visit an attacker-controlled page; no Airflow account or credential is required of the attacker. This is the same login-CSRF class fixed in the Keycloak auth manager as CVE-2026-40948.</p> <p>Users of apache-airflow-providers-amazon are recommended to upgrade to version 9.38.0, which fixes the issue.</p> <p>Apache Airflow Amazon provider: the AWS auth manager&#39;s SAML login flow does not bind the authentication response to the browser that began it. The login handler discards the AuthnRequest ID and the callback validates the assertion without requiring a matching InResponseTo, so an unauthenticated attacker who can cause a victim to load a page can complete a SAML login in the victim&#39;s browser using the attacker&#39;s own assertion, silently logging the victim into the attacker&#39;s Airflow account. Subsequent work the victim performs lands in a session the attacker controls.</p> <p>Affects deployments using the AWS auth manager with SAML authentication. The victim needs only to visit an attacker-controlled page; no Airflow account or credential is required of the attacker. This is the same login-CSRF class fixed in the Keycloak auth manager as CVE-2026-40948.</p> <p>Users of apache-airflow-providers-amazon are recommended to upgrade to version 9.38.0, which fixes the issue.</p> https://db.gcve.eu/vuln/fkie_cve-2026-86467 https://db.gcve.eu/vuln/ghsa-2738-4g2m-64cv <p>Apache Airflow Amazon provider: the AWS auth manager&#39;s SAML login flow does not bind the authentication response to the browser that began it. The login handler discards the AuthnRequest ID and the callback validates the assertion without requiring a matching InResponseTo, so an unauthenticated attacker who can cause a victim to load a page can complete a SAML login in the victim&#39;s browser using the attacker&#39;s own assertion, silently logging the victim into the attacker&#39;s Airflow account. Subsequent work the victim performs lands in a session the attacker controls.</p> <p>Affects deployments using the AWS auth manager with SAML authentication. The victim needs only to visit an attacker-controlled page; no Airflow account or credential is required of the attacker. This is the same login-CSRF class fixed in the Keycloak auth manager as CVE-2026-40948.</p> <p>Users of apache-airflow-providers-amazon are recommended to upgrade to version 9.38.0, which fixes the issue.</p> <p>Apache Airflow Amazon provider: the AWS auth manager&#39;s SAML login flow does not bind the authentication response to the browser that began it. The login handler discards the AuthnRequest ID and the callback validates the assertion without requiring a matching InResponseTo, so an unauthenticated attacker who can cause a victim to load a page can complete a SAML login in the victim&#39;s browser using the attacker&#39;s own assertion, silently logging the victim into the attacker&#39;s Airflow account. Subsequent work the victim performs lands in a session the attacker controls.</p> <p>Affects deployments using the AWS auth manager with SAML authentication. The victim needs only to visit an attacker-controlled page; no Airflow account or credential is required of the attacker. This is the same login-CSRF class fixed in the Keycloak auth manager as CVE-2026-40948.</p> <p>Users of apache-airflow-providers-amazon are recommended to upgrade to version 9.38.0, which fixes the issue.</p> https://db.gcve.eu/vuln/ghsa-2738-4g2m-64cv