The vulnerability arises in the AWS Systems Manager Parameter Store and Secrets Manager backends of the Apache Airflow Amazon provider. When a team-scoped Connection or Variable ID fails to resolve locally, the backend falls back to a team-agnostic lookup, potentially resolving an ID that names another team’s namespace. This allows a user in one team to retrieve credentials that belong to a different team, exposing secrets in full. The weakness is a flow control bypass (CWE‑639) that undermines intended isolation between teams.

The affected product is Apache Airflow’s Amazon provider from the Apache Software Foundation. No specific version range is stated in the advisory; users should refer to compatible releases. The issue manifests when multi-team mode is enabled and either the SSM or Secrets Manager backend is used.

Based on the description, it is inferred that the attacker leverages the fallback lookup path: when a team‑scoped Connection or Variable ID fails to resolve, the backend falls back to a team‑agnostic lookup, allowing a user to supply an ID that names another team's namespace. The exploit requires only normal operation of Airflow in multi‑team mode, no special configuration. Because retrieving plaintext credentials is possible, the impact is high. EPSS data is not available, and the flaw is not listed in the CISA KEV catalog, but the lack of mitigation in common deployments means the risk remains significant.