CVE-2026-46745: CWE-90: (LDAP Injection) in Apache Software Foundation Apache Airflow FAB provider
Apache Airflow FAB Auth Manager contains an LDAP filter injection vulnerability (CWE-90) that allows unauthenticated attackers to exfiltrate directory data or bypass authentication. Upgrade to apache-airflow-providers-fab 3.6.4 or later. If immediate upgrade is not possible, disable LDAP authentication until the provider can be updated.
AI Analysis
Technical Summary
The Apache Airflow FAB provider contains an LDAP filter injection vulnerability classified as CWE-90. This vulnerability enables unauthenticated attackers to manipulate LDAP queries, potentially leading to unauthorized data disclosure or authentication bypass. The issue is resolved in version 3.6.4 of the apache-airflow-providers-fab package. No CVSS score is provided, and no known exploits are reported in the wild at this time.
Potential Impact
Successful exploitation can result in unauthorized access to directory information or bypass of authentication mechanisms within Apache Airflow's FAB provider. This could compromise the confidentiality and integrity of authentication processes and directory data.
Mitigation Recommendations
Upgrade to apache-airflow-providers-fab version 3.6.4 or later to remediate this vulnerability. If an immediate upgrade is not possible, disable LDAP authentication in the affected environment until the provider is updated. Patch status is not explicitly confirmed in the vendor advisory, but the recommended upgrade version indicates an official fix is available.
CVE-2026-46745: CWE-90: (LDAP Injection) in Apache Software Foundation Apache Airflow FAB provider
Description
Apache Airflow FAB Auth Manager contains an LDAP filter injection vulnerability (CWE-90) that allows unauthenticated attackers to exfiltrate directory data or bypass authentication. Upgrade to apache-airflow-providers-fab 3.6.4 or later. If immediate upgrade is not possible, disable LDAP authentication until the provider can be updated.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Apache Airflow FAB provider contains an LDAP filter injection vulnerability classified as CWE-90. This vulnerability enables unauthenticated attackers to manipulate LDAP queries, potentially leading to unauthorized data disclosure or authentication bypass. The issue is resolved in version 3.6.4 of the apache-airflow-providers-fab package. No CVSS score is provided, and no known exploits are reported in the wild at this time.
Potential Impact
Successful exploitation can result in unauthorized access to directory information or bypass of authentication mechanisms within Apache Airflow's FAB provider. This could compromise the confidentiality and integrity of authentication processes and directory data.
Mitigation Recommendations
Upgrade to apache-airflow-providers-fab version 3.6.4 or later to remediate this vulnerability. If an immediate upgrade is not possible, disable LDAP authentication in the affected environment until the provider is updated. Patch status is not explicitly confirmed in the vendor advisory, but the recommended upgrade version indicates an official fix is available.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- apache
- Date Reserved
- 2026-05-18T09:26:04.993Z
- Cvss Version
- null
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a142e12a5ae1af1aa911933
Added to database: 5/25/2026, 11:10:10 AM
Last enriched: 5/25/2026, 11:25:17 AM
Last updated: 5/25/2026, 12:29:01 PM
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.