CVE-2026-97636 | Apache Airflow HashiCorp Provider up to 4.7.x HashiCorp Vault Secrets Backend key privileges management
A vulnerability described as problematic has been identified in Apache Airflow HashiCorp Provider up to 4.7.x. Affected by this issue is some unknown functionality of the component HashiCorp Vault Secrets Backend. The manipulation of the argument key results in improper privilege management.
This vulnerability is identified as CVE-2026-97636. The attack can be executed remotely. There is not any exploit available.
Upgrading the affected component is recommended.VulDB Recent EntriesRead More