Executive brief
A vulnerability in the Apache Airflow Amazon provider could allow unauthorized users to access sensitive credentials stored in AWS Secrets Manager or SSM Parameter Store. This issue occurs when using the experimental multi-tenant teams feature, where a user could craft a specific connection ID to trick the system into retrieving another team's secrets. Exploitation could lead to the exposure of sensitive cloud credentials and unauthorized access to connected AWS resources.
Technical details
An incorrect authorization vulnerability (CWE-863) exists in the `apache-airflow-providers-amazon` package prior to version 9.28.0. The flaw resides in the team-scoping logic of the AWS Secrets Manager and SSM Parameter Store backends. When the experimental multi-tenant teams feature is enabled, the backend used a forward slash ('/') as a separator. A caller without team context could provide a `conn_id` containing a slash (e.g., "my_team/conn") that resolves to the same storage path as a legitimate team-scoped secret. This allows a low-privileged attacker to retrieve secrets belonging to other teams. The fix in version 9.28.0 changes the separator to '--' and implements checks to reject team-formatted IDs when team context is missing.
Affected products
- Apache Software Foundation apache-airflow-providers-amazon < 9.28.0
Timeline
- 2026-04-26: patched: Pull request merged into main branch
- 2026-05-19: disclosed: Public disclosure via oss-security and NVD
- 2026-05-19: advisory