Apache Apache-Airflow-Providers-Keycloak vulnerabilities

CVE-2026-76187 [CRITICAL] CWE-287 CVE-2026-76187: Apache Airflow Keycloak provider: the unauthenticated token endpoint accepts a client-credentials gr Apache Airflow Keycloak provider: the unauthenticated token endpoint accepts a client-credentials grant for any confidential client registered in the Keycloak realm, not only the client configured for Airflow. No allowlist restricts which client ids may authenticate, so the credentials of an unrelated application that happens to share the realm ar

CVE-2026-76186 [CRITICAL] CWE-565 CVE-2026-76186: Apache Airflow Keycloak provider: from Airflow 3.3 the Keycloak auth manager takes a user's identity Apache Airflow Keycloak provider: from Airflow 3.3 the Keycloak auth manager takes a user's identity from the signed Airflow session token but takes the Keycloak access and refresh tokens used for every authorization decision from separate, unauthenticated cookies, and never checks that the two describe the same subject. A user who holds any valid

CVE-2026-40948 [MEDIUM] CWE-352 CVE-2026-40948: The Keycloak authentication manager in `apache-airflow-providers-keycloak` did not generate or valid The Keycloak authentication manager in `apache-airflow-providers-keycloak` did not generate or validate the OAuth 2.0 `state` parameter on the login / login-callback flow, and did not use PKCE. An attacker with a Keycloak account in the same realm could deliver a crafted callback URL to a victim's browser and cause the victim to be logged into the a