CVE-2026-81862: Apache Airflow Teradata provider: Teradata transfer operators embed cloud storage credentials in SQL text, task logs and Teradata query logs
Apache Airflow Teradata provider before 3.7.0 embeds cloud storage credentials in SQL and logs (CVE-2026-81862).
CVE-2026-81862, rated moderate, affects the Apache Airflow Teradata provider before version 3.7.0. S3ToTeradataOperator and AzureBlobStorageToTeradataOperator interpolate private source-bucket credentials as plain string literals into the CREATE MULTISET TABLE ... LOCATION statement. Those secrets can appear in the SQL text, Airflow task logs, and Teradata query logs. The disclosure does not report active exploitation.
46