CVE-2026-25604

Published: Mar 9, 2026Modified: Jul 2, 2026

5.4

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.5

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

In AWS Auth manager, the origin of the SAML authentication has been used as provided by the client and not verified against the actual instance URL. This allowed to gain access to different instances with potentially different access controls by reusing SAML response from other instances. You should upgrade to 9.22.0 version of provider if you use AWS Auth Manager.

Affected (1)

Products: Apache: Apache Airflow Providers Amazon

1 product

Apache Airflow Providers Amazon

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Apache Apache Airflow Providers Amazon	From 8.0.0 to 9.22.0

Related CWEs

Origin Validation Error

The product does not properly verify that the source of data or communication is valid.

References (3)

https://github.com/apache/airflow/pull/61368

Source: security@apache.org

Issue TrackingPatch

https://lists.apache.org/thread/spwwrsmwxod7fpttcd7n7zs46j839l77

Source: security@apache.org

Mailing List

http://www.openwall.com/lists/oss-security/2026/03/09/6

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

Timeline

No history available yet.