CLEANSTART-2026-JE81317: Authlib is a Python library which builds OAuth and OpenID Connect servers

Q: Can an unauthenticated attacker exploit this issue without user involvement?

No. The supplied vector indicates that an attacker needs low-level privileges and that user interaction is required. The attack can be conducted over the network and has low attack complexity.

Q: What is the stated security impact if exploitation succeeds?

The reported impact is limited to confidentiality. Integrity and availability are not affected according to the supplied vector.

Published Nov 3, 2026

Updated

Security vulnerability affects the airflow-3 package. Authlib is a Python library which builds OAuth and OpenID Connect servers.

Affected Software

1 affected componentFixes available

cleanstart/airflow-3<3.3.2-r1

3.3.2-r1

Event History

Nov 3, 2026

Advisory Published

via OSV·12:42 AM

Data Sourced

via OSV·12:42 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-114614

Frequently Asked Questions

Can an unauthenticated attacker exploit this issue without user involvement?

No. The supplied vector indicates that an attacker needs low-level privileges and that user interaction is required. The attack can be conducted over the network and has low attack complexity.

What is the stated security impact if exploitation succeeds?