VYPR

Cloud Secret Manager

by Google

CVEs (1)

  • CVE-2026-68868MedAug 12, 2026
    risk 0.35cvss 6.5epss

    The Google Cloud Secret Manager secrets backend in Apache Airflow's Google provider never applied the team scope when resolving Connections and Variables: the caller's `team_name` was accepted by the backend but dropped at the internal call boundary, so every lookup resolved…