{"vulnerability": "CVE-2026-92228", "sightings": [{"uuid": "9da5b33f-87e7-4466-8268-2f95a47a166c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92228", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117447255856841039", "content": "CVE-2026-92228 Apache Airflow Keycloak provider: Keycloak multi-team provisioning grants every team role global audit-log read The Apache Airflow Keycloak provider's multi-team provisioning (`_attach_team_permissions`) granted every team role global read access to audit logs. Deployments that enable multi-team mode with the Keycloak auth manager and provision teams through it are affected: any authenticated member of one team could read other teams' audit events through the UI or the event-log API.\nUsers of apache-airflow-providers-keycloak are recommended to upgrade to apache-airflow-providers-keycloak 0.11.1 or later.\nhttps://www.cve.org/CVERecord?id=CVE-2026-92228https://github.com/apache/airflow/pull/73696#ApacheSoftwareFoundation #ApacheAirflowKeycloakprovider#CVE_2026_92228#bot", "creation_timestamp": "2026-10-15T22:21:43.777649Z"}, {"uuid": "2ba82f80-b44c-47b0-85e9-352572ba20fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92228", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/dshfgcujagpr5", "content": "CVE-2026-92228: Apache Airflow Keycloak provider: Keycloak multi-team provisioning grants every team role global audit-log read", "creation_timestamp": "2026-10-15T23:35:21.630352Z"}]}