VULNERABILITY INTELLIGENCE

CVE-2026-92228

CVSS score6.5 MEDIUM

EPSS probability0.41%

CISA KEVNot currently listed

Published2026-10-15

Last modified2026-10-16

Description

The Apache Airflow Keycloak provider's multi-team provisioning (`_attach_team_permissions`) granted every team role global read access to audit logs. Deployments that enable multi-team mode with the Keycloak auth manager and provision teams through it are affected: any authenticated member of one te…