IT SBIT Services
Schneeberger
DEEN
CVE tracker

Apache Airflow Amazon provider: Login CSRF in AWS auth manager SAML login

CVE-2026-86467High 8.8

← All vulnerabilities

Summary

The AWS auth manager of the Apache Airflow Amazon provider does not bind the SAML authentication response to the browser that started the login. An unauthenticated attacker who can make a logged-in or logging-in user open a page they control can complete a SAML login in the victim's browser with the attacker's own signed assertion. The victim is then silently logged into the attacker's Airflow account, and later work in that session is visible to the attacker. The attacker needs no Airflow account, and the issue only applies to deployments that use the AWS auth manager with SAML.

Affected

  • apache-airflow-providers-amazon versions 0 to before 9.38.0
  • Only deployments using the AWS auth manager with SAML authentication
  • Default configuration is unaffected according to the CNA record

Fixed in

  • Upgrade apache-airflow-providers-amazon to 9.38.0 or later (9.38.0 is the minimum fixed version)
  • Fix: PR #73698 binds the SAML response to the AuthnRequest ID of the browser's own login

Workaround

  • Unknown. No vendor workaround was found in the sources.
  • Limit access to the Airflow web UI until the upgrade is done.
  • Use the new opt-in setting allow_idp_initiated_login only if needed; it stays False by default.

Exploitation

  • No confirmed exploitation in the wild is known.
  • Not listed in the CISA KEV catalogue.
  • CISA SSVC: exploitation none, not automatable, total technical impact.
  • No public proof of concept is known to us, which does not prove that none exists.

Our recommendation

  • Check whether any Airflow environment uses the AWS auth manager with SAML.
  • If affected, upgrade apache-airflow-providers-amazon to 9.38.0 or later.
  • Until then, restrict access to the Airflow UI and advise users not to open untrusted links while logged in.
  • Review logs for unexpected SAML logins and sessions that switch accounts.
  • Plan for the Apache advisory and NVD scoring, which were still pending when this entry was written.

Public exploits

PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.

Research sources

Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 31 Oct 2026, 15:36.

Original description (NVD)

Apache Airflow Amazon provider: the AWS auth manager's SAML login flow does not bind the authentication response to the browser that began it. The login handler discards the AuthnRequest ID and the callback validates the assertion without requiring a matching InResponseTo, so an unauthenticated attacker who can cause a victim to load a page can complete a SAML login in the victim's browser using the attacker's own assertion, silently logging the victim into the attacker's Airflow account. Subsequent work the victim performs lands in a session the attacker controls. Affects deployments using the AWS auth manager with SAML authentication. The victim needs only to visit an attacker-controlled page; no Airflow account or credential is required of the attacker. This is the same login-CSRF class fixed in the Keycloak auth manager as CVE-2026-40948. Users of apache-airflow-providers-amazon are recommended to upgrade to version 9.38.0, which fixes the issue.

NVD references (3)

Sources

The tracker combines official, freely usable data sources – updated continuously:

This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.

Affected? We can help.

We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.

Get in touchRSS feed