{"id":"CVE-2026-92204","kind":"vulnerability","aliases":["CVE-2026-92204"],"related":[],"title":"Airbyte OneDrive connector: SSRF lets authenticated users read internal resources","description":"Airbyte OneDrive Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Airbyte. Authentication is required to exploit this vulnerability.\n\nThe specific flaw exists within the _get_shared_drive_object method. The issue results from the lack of proper validation of a URI prior to accessing resources. An attacker can leverage this vulnerability to disclose information in the context of the service account. Was ZDI-CAN-28216.","summary":"The Airbyte OneDrive connector does not validate a URI in _get_shared_drive_object before fetching it. An authenticated remote user can make the server issue requests to arbitrary destinations and disclose information visible to the connector's service account.","severity":"high","cvss":7.7,"epss":0.00414,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["airbyte","data-pipelines","onedrive","package","self-hosted"],"not_affected_if":["auth-required","no-onedrive-connector"],"how_to_check":"- Confirm the Airbyte version in use and whether the OneDrive source connector is deployed\n- unknown","fix":"- Upgrade Airbyte to a patched release (version unknown from sources)\n- Until patched, restrict outbound network access from the Airbyte workers to internal address ranges and cloud metadata endpoints","status":"open","published_at":"2026-10-21T18:17:30+00:00","first_seen_at":"2026-10-23T21:57:29+00:00","triaged_at":"2026-10-25T03:10:29+00:00","updated_at":"2026-10-25T03:10:29+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-10-25T03:10:29Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade Airbyte to a patched release (version unknown from sources)\n- Until patched, restrict outbound network access from the Airbyte workers to internal address ranges and cloud metadata endpoints","reach":"network","title":"Airbyte OneDrive connector: SSRF lets authenticated users read internal resources","impact":"medium","summary":"The Airbyte OneDrive connector does not validate a URI in _get_shared_drive_object before fetching it. An authenticated remote user can make the server issue requests to arbitrary destinations and disclose information visible to the connector's service account.","category":"package","nicknames":[],"who_cares":["airbyte","self-hosted","data-pipelines","onedrive"],"confidence":0.6,"needs_auth":"yes","worst_case":"Attacker reads internal data reachable by the connector's service account","analyst_note":"Find affected and fixed Airbyte versions and the patch commit in the NVD entry or ZDI advisory (ZDI-CAN-28216) to fill how_to_check and fix.","how_to_check":"- Confirm the Airbyte version in use and whether the OneDrive source connector is deployed\n- unknown","needs_analyst":true,"not_affected_if":["no-onedrive-connector","auth-required"],"who_is_affected":"Teams running Airbyte with the OneDrive source connector configured, where users can create or edit connections. Deployments without the OneDrive connector, or with no untrusted users on the Airbyte instance, have less exposure. The sources do not state which Airbyte versions are vulnerable.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000634,"input_tokens":3460,"output_tokens":576,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-92204':13A,16A '28216':152C 'access':130C 'account':65B,147C 'affect':94C 'airbyt':1A,17B,27B,66C,97C 'allow':83C 'arbitrari':54B,88C 'attack':85C,133C 'authent':6A,44B,98C 'connector':3A,29B,62B,68C 'context':143C 'cve':11A,14A 'data':19B 'data-pipelin':18B 'destin':55B 'disclos':57B,139C 'disclosur':79C 'drive':38B,71C,113C 'exist':108C 'exploit':102C 'fetch':41B 'flaw':107C 'forgeri':77C 'get':36B,69C,111C 'host':25B 'inform':58B,78C,140C 'initi':87C 'instal':95C 'intern':9A 'issu':51B,117C 'lack':121C 'let':5A 'leverag':135C 'make':48B 'method':115C 'object':39B,72C,114C 'onedr':2A,21B,28B,67C 'packag':22B 'pipelin':20B 'prior':128C 'proper':123C 'read':8A 'remot':45B,84C 'request':52B,76C,92C 'requir':100C 'resourc':10A,131C 'result':118C 'self':24B 'self-host':23B 'server':50B,74C,90C 'server-sid':73C,89C 'servic':64B,146C 'share':37B,70C,112C 'side':75C,91C 'specif':106C 'ssrf':4A 'uri':34B,127C 'user':7A,46B 'valid':32B,124C 'visibl':59B 'vulner':80C,82C,104C,137C 'within':109C 'zdi':150C 'zdi-can':149C","nicknames":[],"mitigations":[],"who_affected":"Teams running Airbyte with the OneDrive source connector configured, where users can create or edit connections. Deployments without the OneDrive connector, or with no untrusted users on the Airbyte instance, have less exposure. The sources do not state which Airbyte versions are vulnerable.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-21T18:17:30+00:00","kev":null,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","cvss_by":"zdi-disclosures@trendmicro.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-92204","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92204","severity":null,"published_at":"2026-10-21T18:17:30+00:00","modified_at":"2026-10-22T17:34:37+00:00","first_seen_at":"2026-10-23T21:57:29+00:00","fetched_at":"2026-10-23T22:29:01+00:00","note":null},{"source":"epss","external_id":"CVE-2026-92204","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-92204","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T13:15:54+00:00","fetched_at":"2026-10-24T13:15:54+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}