Airbytehq vulnerabilities
We track 2 vulnerabilities in Airbytehq products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 25, 2026.
2vulnerabilities
0critical
2high
0exploited
8.7average CVSS score
Latest Airbytehq vulnerabilities
- 8.8 High severity
airbyte-platform: Authorization Bypass Through User-Controlled Key
Airbyte Platform resolves the workspace used for its authorization decision from a field the caller supplies. AuthorizationServerHandler copies recognised identifiers out of the raw JSON request body into X-Airbyte-* headers, and AuthenticationHeaderResolver.r
- 8.5 High severity
airbyte: Improper Neutralization of Special Elements Used in a Template Engine
Airbyte is a data integration platform for ELT pipelines. Airbyte connection builder docker image is vulnerable to RCE via SSTI which allows an authenticated remote attacker to execute arbitrary code on the server as the web server user. The connection builder