EUVD-2026-107402
GHSA-qm5c-qhg5-wgqx
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessAuthenticate to Airbyte with connector-config rights
-
DeliveryConfigure OneDrive source with crafted URI
-
ExploitTrigger _get_shared_drive_object fetch (SSRF)
-
ExecutionServer requests internal/cloud resource as service account
-
PersistRead response contents
-
ImpactDisclose internal data
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V4 - API and Web Service URL allowlisting, SSRF prevention
MITRE ATT&CK
2 techniques across 2 tactics: Initial Access, Credential Access The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Requires an authenticated Airbyte user (PR:L) who can configure or run the OneDrive (SharePoint/OneDrive) source connector, which invokes the vulnerable _get_shared_drive_object method; the attacker must supply an attacker-controlled URI/resource path that the server fetches without validation. Exploitation is limited by: (1) the need for valid authenticated access with connector-configuration privileges, and (2) the presence and usage of the OneDrive connector in the deployment. Impact is amplified where the Airbyte server has network reachability to sensitive internal targets (cloud instance-metadata endpoints, internal admin APIs, databases); it is reduced in network-segmented or egress-filtered deployments. No special non-default product setting beyond having the OneDrive source available is indicated by the description. |
| Impact | This is a moderate-priority, authenticated SSRF (CWE-918) in the Airbyte OneDrive source connector. The provided CVSS:3.0 vector (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N = 7.7) is internally consistent with the description: network-reachable, low attack complexity, low-privilege authenticated attacker, no user interaction, with a scope change and high confidentiality impact but no integrity or availability impact - matching an information-disclosure SSRF where the forged request executes in the context of the service account and can reach resources outside the vulnerable component's security scope. The key mitigating signal is PR:L: exploitation requires an authenticated foothold (a valid Airbyte account/workspace able to configure or run the OneDrive connector), so this is not an unauthenticated internet-wide threat. No EPSS score was supplied, the CVE is NOT on CISA KEV, and no public POC is referenced (only the ZDI advisory), so there is no public exploit identified at time of analysis and no evidence of active exploitation. Signals do not conflict: a genuinely dangerous bug class (SSRF, which is highly impactful in cloud/data-pipeline deployments with access to metadata endpoints and internal services) tempered by an authentication requirement and absence of exploitation evidence. Net: patch on a normal prioritized cadence, elevated for internet-exposed or multi-tenant Airbyte deployments. |
| Exploit ScenarioDerived | An authenticated Airbyte user with permission to configure or run a OneDrive source connector supplies a malicious URI that the vulnerable _get_shared_drive_object method fetches without validation, causing the Airbyte server to issue an attacker-controlled request. The attacker uses this to reach internal-only endpoints (e.g., cloud metadata services or internal APIs) and exfiltrate the responses in the context of the service account. No public POC is referenced; given AV:N/AC:L the technical barrier is low once an authenticated session is obtained. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Oct 21, 2026
Server-side request forgery in the Airbyte OneDrive source connector allows an authenticated low-privileged user to pass a crafted resource URI to the _get_shared_drive_object method, causing the Airbyte server to make arbitrary outbound requests and disclose information in the service account’s context. The flaw affects Airbyte deployments where the OneDrive connector is available, as reflected by the wildcard CPE for airbyte:airbyte, and carries a CVSS 3.1 score of 7.7 (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N). No public exploit was identified at time of analysis, and exploitation requires valid authenticated access plus the ability to configure or run the OneDrive source connector.
RemediationAI
No vendor-released patch identified at time of analysis; monitor the ZDI advisory at https://www.zerodayinitiative.com/advisories/ZDI-26-704/ for an Airbyte fix and apply it as soon as a patched release is published. Until then, restrict creation and configuration of OneDrive source connectors to trusted administrative users, since the flaw requires an authenticated user with connector privileges; this reduces exposure but limits legitimate integration work. Enforce egress filtering and network segmentation on Airbyte workers so they cannot reach cloud instance-metadata endpoints (for example 169.254.169.254 and fd00:ec2::254), internal administrative APIs, or unneeded RFC1918 address ranges; the trade-off is that overly broad blocking can break legitimate OneDrive/SharePoint or other connector traffic, so allowlist only required destinations. Add monitoring and alerting for anomalous outbound requests from connector processes and review service-account permissions; if compromise is suspected, rotate the Airbyte service-account credentials.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The issue is CWE-918 (Server-Side Request Forgery) in the Airbyte OneDrive connector’s _get_shared_drive_object method. That method is responsible for resolving or fetching shared drive objects, but it does not properly validate the URI before accessing the resource, so attacker-controlled destination addresses are fetched by the Airbyte service. Because the request originates from the server, it can bypass network controls that trust the Airbyte host and reach internal services, cloud instance metadata endpoints, or administrative APIs; the CVSS scope change (S:C) and high confidentiality impact reflect that the vulnerable component can access resources beyond its intended authorization boundary, while integrity and availability impacts are none. The vector requires network access, low privileges (PR:L), and no user interaction, meaning an authenticated Airbyte user with connector configuration rights is the typical exploiter. CPE data lists all Airbyte versions (airbyte:airbyte:*), so no fixed version can be inferred from the input; the ZDI advisory ZDI-26-704 is the reference.
Know when Airbyte gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Network-reachable connector requiring a low-privilege authenticated account (PR:L), no UI; SSRF reaches resources beyond the component's scope (S:C) yielding information disclosure only (C:H, I:N, A:N).
Primary rating from Vendor (zdi).
CVSS VectorVendor: zdi
DescriptionCVE.org
Airbyte OneDrive Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Airbyte. Authentication is required to exploit this vulnerability.
The specific flaw exists within the _get_shared_drive_object method. The issue results from the lack of proper validation of a URI prior to accessing resources. An attacker can leverage this vulnerability to disclose information in the context of the service account. Was ZDI-CAN-28216.
Executive ViewAI
Airbyte deployments that expose the OneDrive source connector are affected by CVE-2026-92204, a high-severity server-side request forgery flaw that lets an authenticated low-privileged user cause the Airbyte server to make arbitrary outbound requests and expose information available to its service account. Leadership should care because affected deployments may permit unauthorized access to service-account-visible data, and no vendor-released patch is identified at time of analysis. No public exploit was identified at time of analysis, but exposure reduction currently depends on restricting connector access and controlling outbound network traffic.
No vendor-released patch identified at time of analysis. Interim mitigations include disabling the Airbyte OneDrive source connector where not required, restricting connector configuration and execution to a minimal trusted administrator group, enforcing least-privilege service-account permissions scoped only to required OneDrive resources, applying egress filtering or allowlisting so Airbyte workers can reach only approved destinations, validating or blocking user-supplied OneDrive resource URIs, and monitoring/alerting on anomalous outbound requests and connector configuration changes until a vendor patch is available.
Threat Intelligence Overview
NVD
CVE.org
EPSS
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Server-Side Request Forgery exploits applications that fetch remote resources based on user-supplied URLs.
Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.
Exploit-DB