Description
Airbyte SharePoint Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Airbyte. Authentication is required to exploit this vulnerability.

The specific flaw exists within the implementation of the _get_shared_drive_object method. The issue results from the lack of proper validation of a URI prior to accessing resources. An attacker can leverage this vulnerability to disclose information in the context of the service account. Was ZDI-CAN-28215.
Published: 2026-10-21
Score: 7.7 High
EPSS: < 1% Very Low
KEV: No
Impact: Server‑Side Request Forgery enabling information disclosure via the SharePoint connector
Action: Apply Patch
AI Analysis

Impact

The vulnerability exists in the _get_shared_drive_object method of Airbyte's SharePoint connector. It arises from missing URI validation before the connector accesses resources, permitting remote attackers with authentication to initiate arbitrary server‑side requests. This can lead to the disclosure of information within the context of the service account. The weakness is classified as CWE-918.

Affected Systems

Airbyte installations that use the SharePoint connector are impacted. No specific affected Airbyte versions are listed in the advisory, so all releases using the vulnerable connector code should be reviewed.

Risk and Exploitability

The CVSS score of 7.7 indicates high severity. The EPSS score is not available, and the vulnerability is not listed in CISA's KEV catalog. Exploitation requires authentication, so the attack vector is an authenticated SSRF. Attackers who log in with sufficient privileges can instruct the Airbyte server to query arbitrary internal URLs, potentially exposing sensitive data.

Generated by OpenCVE AI on October 22, 2026 at 05:19 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade to the latest Airbyte release that fixes the SSRF issue in the SharePoint connector.
  • If a patch is not yet available, restrict Airbyte's outbound traffic by enforcing firewall rules or network ACLs to allow connections only to known, trusted SharePoint endpoints.
  • Limit access to the Airbyte service account and credentials used by the connector to privileged users only, and enforce proper role‑based access control.
  • Monitor Airbyte logs for unexpected outbound requests and investigate any anomalies to detect potential exploitation attempts.

Generated by OpenCVE AI on October 22, 2026 at 05:19 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 30 Oct 2026 16:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 22 Oct 2026 11:00:00 +0000

Type Values Removed Values Added
First Time appeared Airbyte
Airbyte airbyte
Vendors & Products Airbyte
Airbyte airbyte

Wed, 21 Oct 2026 17:15:00 +0000

Type Values Removed Values Added
Description Airbyte SharePoint Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Airbyte. Authentication is required to exploit this vulnerability. The specific flaw exists within the implementation of the _get_shared_drive_object method. The issue results from the lack of proper validation of a URI prior to accessing resources. An attacker can leverage this vulnerability to disclose information in the context of the service account. Was ZDI-CAN-28215.
Title Airbyte SharePoint Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability
Weaknesses CWE-918
References
Metrics cvssV3_0

{'score': 7.7, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N'}

Subscriptions

Airbyte Airbyte
cve-icon MITRE

Status: PUBLISHED

Assigner: zdi

Published:

Updated: 2026-10-30T15:25:34.464Z

Reserved: 2026-09-15T18:15:08.419Z

Link: CVE-2026-92203

cve-icon Vulnrichment

Updated: 2026-10-30T15:25:30.769Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-21T18:17:30.757

Modified: 2026-10-30T16:17:59.520

Link: CVE-2026-92203

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-22T10:40:53Z

Weaknesses
  • CWE-918

    Server-Side Request Forgery (SSRF)