Airbyte vulnerabilities
We track 3 vulnerabilities in Airbyte products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 21, 2026.
Latest Airbyte vulnerabilities
- 7.7 High severity
Airbyte: Server-Side Request Forgery
Airbyte OneDrive Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Airbyte. Authentication is
- 7.7 High severity
Airbyte: Server-Side Request Forgery
Airbyte SharePoint Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Airbyte. Authentication i
- 8.5 High severity
airbyte: Improper Neutralization of Special Elements Used in a Template Engine
Airbyte is a data integration platform for ELT pipelines. Airbyte connection builder docker image is vulnerable to RCE via SSTI which allows an authenticated remote attacker to execute arbitrary code on the server as the web server user. The connection builder