Airbyte Platform
Monthly
Cross-workspace authorization bypass in Airbyte Platform through v2.0.0 allows any authenticated workspace member to read, modify, and delete resources in workspaces they have no access to. The flaw in AuthenticationHeaderResolver.resolveWorkspace prioritizes a caller-supplied X-Airbyte-Workspace-Id value for authorization, while the actual operation executes against the caller-supplied resource identifier - with no subsequent reconciliation check. A publicly available exploit exists (reported by VulnCheck), and exploitation requires only basic workspace membership, making this a realistic lateral-movement vector in any multi-tenant Airbyte deployment.
Cross-workspace authorization bypass in Airbyte Platform through v2.0.0 allows any authenticated workspace member to read, modify, and delete resources in workspaces they have no access to. The flaw in AuthenticationHeaderResolver.resolveWorkspace prioritizes a caller-supplied X-Airbyte-Workspace-Id value for authorization, while the actual operation executes against the caller-supplied resource identifier - with no subsequent reconciliation check. A publicly available exploit exists (reported by VulnCheck), and exploitation requires only basic workspace membership, making this a realistic lateral-movement vector in any multi-tenant Airbyte deployment.