A vulnerability was found in Apache Airflow up to 3.1.7 and classified as problematic. This impacts an unknown function of the component Azure Service Bus. Executing a manipulation of the argument access_key/connection_string can lead to information disclosure.

This vulnerability appears as CVE-2026-25219. The attacker needs to be present on the local network. There is no available exploit.

It is suggested to upgrade the affected component.