CLEANSTART-2026-LO22956: Authlib is a Python library which builds OAuth and OpenID Connect servers

Q: What does an attacker need to exploit this issue?

The CVSS vector indicates network access, no prior privileges, and user interaction are required. Exploitation is rated high complexity, so additional conditions beyond simply reaching a network-exposed service are required.

Q: What is the expected impact if exploitation succeeds?

The reported impact is low confidentiality and low integrity impact, with no availability impact. The supplied severity score is 4.2 (medium).

Published Nov 3, 2026

Updated

Security vulnerability affects the airflow-3 package. Authlib is a Python library which builds OAuth and OpenID Connect servers.

Affected Software

1 affected componentFixes available

cleanstart/airflow-3<3.3.2-r1

3.3.2-r1

Event History

Nov 3, 2026

Advisory Published

via OSV·12:42 AM

Data Sourced

via OSV·12:42 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-114617

Frequently Asked Questions

What does an attacker need to exploit this issue?

The CVSS vector indicates network access, no prior privileges, and user interaction are required. Exploitation is rated high complexity, so additional conditions beyond simply reaching a network-exposed service are required.

What is the expected impact if exploitation succeeds?

The reported impact is low confidentiality and low integrity impact, with no availability impact. The supplied severity score is 4.2 (medium).

CLEANSTART-2026-LO22956: Authlib is a Python library which builds OAuth and OpenID Connect servers

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the expected impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the expected impact if exploitation succeeds?