Four Apache Airflow provider flaws disclosed September 29
First coverage.
oss-security disclosed four Apache Airflow provider flaws on September 29, 2026, covering credential and token exposure plus query and SQL injection.
On September 29, 2026, four oss-security posts described separate Apache Airflow provider flaws. CVE-2026-81862, rated moderate and fixed in the Teradata provider 3.7.0, lets S3ToTeradataOperator and AzureBlobStorageToTeradataOperator place private source-bucket credentials into SQL, Airflow task logs, and Teradata query logs. CVE-2026-86843, rated low and fixed in the same 3.7.0 release, is SQL injection via unconstrained params in the compute-cluster example DAG that a user permitted to trigger the DAG can abuse; Shahar Epstein reported it that day. CVE-2026-81914, rated low and fixed in Google provider 22.6.0, allows an apostrophe in a file or folder name to break a Drive search literal and append query clauses. CVE-2026-81930, rated moderate and disclosed by Shahar Epstein, can redirect a Snowflake SQL API bearer token off-domain when the account field contains a slash, question mark, or hash, and that post gives no fixed version. The posts do not contradict one another and none report exploitation in the wild.
- CVE-2026-81862, rated moderate, is fixed in Apache Airflow Teradata provider 3.7.0: S3ToTeradataOperator and AzureBlobStorageToTeradataOperator can embed private source-bucket credentials as string literals in CREATE MULTISET TABLE ...…
- CVE-2026-86843, rated low and also fixed in Teradata provider 3.7.0, is SQL injection through unconstrained Dag Params in the compute-cluster example DAG; a user allowed only to trigger that DAG is a lower-trust role than the DAG author.
- CVE-2026-81914, rated low, is fixed in Apache Airflow Google provider 22.6.0: file and folder names were interpolated into single-quoted Google Drive search literals without escaping, so an apostrophe can append attacker-chosen query…
- CVE-2026-81930, rated moderate, affects the Apache Airflow Snowflake provider: the account field is placed in https://{account}.snowflakecomputing.com/api/v2/statements, and a slash, question mark, or hash can send the SQL API bearer token…
- Shahar Epstein is named for CVE-2026-81930 and, on September 29, 2026, for CVE-2026-86843; the other two posts do not name a reporter.
- None of the four oss-security posts report active or in-the-wild exploitation.
Coverage
oldest first · one row per article · UTC- · Sep 29, 2026
oss-securityFirst report
CVE-2026-81862: Apache Airflow Teradata provider: Teradata transfer operators embed cloud storage credentials in SQL text, task logs and Teradata query logs
Apache Airflow Teradata provider before 3.7.0 embeds cloud storage credentials in SQL and logs (CVE-2026-81862).
- · Sep 29, 2026
CVE-2026-81914: Apache Airflow Google provider: Google Drive query injection via unescaped file and folder names
Apache Airflow Google provider before 22.6.0 allows Google Drive query injection via unescaped names (CVE-2026-81914).
- · Sep 29, 2026
CVE-2026-81930: Apache Airflow Snowflake provider: Unvalidated account field redirects SQL API bearer token off-domain
Apache Airflow's Snowflake provider can leak SQL API bearer tokens off-domain via an unvalidated account field (CVE-2026-81930).
- · Sep 29, 2026
CVE-2026-86843: Apache Airflow Teradata provider: SQL injection via unvalidated Dag Params in the compute-cluster example Dag
Apache Airflow Teradata provider before 3.7.0 allows SQL injection via unconstrained example Dag Params.
Vulnerabilities in this story
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-81862+1 related CVE | Cloud credential leak in Apache Airflow Teradata provider | 6.5 group max | — | ||
| CVE-2026-81914 | Google Drive query injection in Apache Airflow Google provider | 4.3 | <1% | PoC | |
| CVE-2026-81930 | Airflow Snowflake provider leaks bearer tokens via account URL | 6.3 | — |