Airflow Amazon provider before 9.38.0 has SAML login CSRF (CVE-2026-86467)
The AWS auth manager accepts a SAML assertion without matching it to the browser that started login.
1 stories, newest first · one card per story
The AWS auth manager accepts a SAML assertion without matching it to the browser that started login.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views