CVE-2026-25604

medium Apache
CVSS v3 Base Score
5.4
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
EPSS Score
0.4%
Exploitation probability in 30 days
Top 72% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Confidentiality
Low
Integrity
Low
Availability
None
Published: March 9, 2026 (123 days ago)
Last Modified: July 2, 2026
Vendor: Apache
Source: NVD

Description

In AWS Auth manager, the origin of the SAML authentication has been used as provided by the client and not verified against the actual instance URL.  This allowed to gain access to different instances with potentially different access controls by reusing SAML response from other instances. You should upgrade to 9.22.0 version of provider if you use AWS Auth Manager.

CWE

CWE-346

Affected Products

apache apache-airflow-providers-amazon

References

🔗 github.com 🔗 lists.apache.org 🔗 www.openwall.com