CVE-2026-92228 | Apache Airflow Keycloak Provider up to 0.11.0 Multi-Team Provisioning _attach_team_permissions privileges management

October 16, 2026 Yanac

A vulnerability described as problematic has been identified in Apache Airflow Keycloak Provider up to 0.11.0. Affected by this vulnerability is the function _attach_team_permissions of the component Multi-Team Provisioning. Such manipulation leads to improper privilege management.

This vulnerability is uniquely identified as CVE-2026-92228. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More