Improper Certificate Validation in Apache Airflow Provider for Databricks

CVE-2026-32794

What is CVE-2026-32794?

An improper certificate validation vulnerability exists in Apache Airflow's Provider for Databricks. The provider's code lacks adequate validation of certificates for connections to the Databricks backend. This oversight allows for potential man-in-the-middle attacks, where malicious actors could intercept and manipulate application traffic or exfiltrate user credentials undetected. It is crucial for users to upgrade to version 1.12.0 to mitigate this vulnerability effectively.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References