Skip to content

CVE record · 1 source

CVE-2026-92228

The Apache Airflow Keycloak provider's multi-team provisioning (`_attach_team_permissions`) granted every team role global read access to audit logs.

Vendor: Red Hat, Apache Software Foundation
Product: Keycloak / Single Sign-On, Airflow, Java libraries / app servers, Open-source identity providers
Exposure class: Identity, Developer platform, Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

12

CVE NVD 16d ago

The Apache Airflow Keycloak provider's multi-team provisioning (`_attach_team_permissions`) granted every team role global read access to audit logs.

The Apache Airflow Keycloak provider's multi-team provisioning (`_attach_team_permissions`) granted every team role global read access to audit logs. Deployments that enable multi-team mode with the Keycloak auth manager and…

CVE-2026-92228 Red Hat Apache Software Foundation