CVE-2026-96806 | Apache Airflow Keycloak Provider up to 0.11.0 KeycloakJWTMiddleware session expiration

October 16, 2026 Yanac

A vulnerability, which was classified as critical, was found in Apache Airflow Keycloak Provider up to 0.11.0. This issue affects some unknown processing of the component KeycloakJWTMiddleware. The manipulation results in session expiration.

This vulnerability is identified as CVE-2026-96806. The attack can be executed remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More