oss-security·11d agoCVE-2026-86466: Apache Airflow FAB provider: FAB Authentik provider: id_token issuer/audience not validated#apache-airflow#authentication-bypass#authentikCVE-2026-86466 3 sources1