Airbyte CVE-2026-92203

Exploitation requires an authenticated, low-privilege Airbyte account (PR:L) and the ability to use or configure the SharePoint source connector, since the flaw lies in that connector's _get_shared_drive_object method accepting an unvalidated URI. The attacker must be able to influence the URI/resource path that this method dereferences. Limiting factors: valid authentication to the Airbyte instance is mandatory (not remote-unauthenticated), the SharePoint connector must be in use, and impact is confined to information disclosure in the service account's context (no write/integrity or availability effect). Network exposure of the Airbyte instance to the authenticated attacker is assumed.

This is a credible but second-tier priority. The CVSS 3.0 base score of 7.7 (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) reflects a network-reachable, low-complexity server-side request forgery that requires only low-privilege authentication and no user interaction, with a changed scope and high confidentiality impact but no integrity or availability impact - consistent with an information-disclosure SSRF rather than code execution. The key mitigating signal is PR:L: an attacker must already hold valid authenticated access to the Airbyte instance, which limits exploitation to insiders or attackers who have already obtained credentials, narrowing the realistic threat population. No EPSS score was provided in the input, so exploitation probability cannot be quantified. The vulnerability is NOT listed in CISA KEV and no public proof-of-concept is referenced (only the ZDI advisory), so this is no public exploit identified at time of analysis - do not treat it as actively exploited. There is no SSVC decision data in the input. Overall the signals are internally consistent (authenticated SSRF with confidentiality-only impact); the main uncertainty is the absence of EPSS/exploitation telemetry and precise affected-version data.

An authenticated Airbyte user with permission to configure or run the SharePoint connector supplies a crafted URI that the _get_shared_drive_object method fetches without validation, causing the Airbyte server to issue an attacker-controlled request. The server then returns or exposes the response in the context of the service account, letting the attacker reach internal-only endpoints or cloud metadata services and disclose their contents. No public exploit code is identified at time of analysis, and exploitation requires valid low-privilege authentication.