Threats·Cloud & SaaSHighApache Airflow Flask-AppBuilder Provider Authentication Bypass Flaw CVE-2026-75156 DisclosedApache Airflow releases security fix for CVE-2026-75156 in the Flask-AppBuilder provider, patching an OAuth2 role-mapping flaw leading to admin privilege escalation.CST Newsroom14 Oct 20268 min read
