Data Engineering

Apache Airflow Flask-AppBuilder Provider Authentication Bypass Flaw CVE-2026-75156 Disclosed

Apache Airflow releases security fix for CVE-2026-75156 in the Flask-AppBuilder provider, patching an OAuth2 role-mapping flaw leading to admin privilege escalation.