{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "Airbyte Connector Builder: arbitrary code execution via custom components even with unsafe code disabled (GHSA-g35w-6r6v-h4r7), exploited in the wild · updates",
  "home_page_url": "https://pwn.watch/i/airbyte-connector-builder-rce-ghsa-g35w-6r6v-h4r7",
  "feed_url": "https://pwn.watch/i/airbyte-connector-builder-rce-ghsa-g35w-6r6v-h4r7/feed.json",
  "description": "Self-managed Airbyte before 2.2.0 let Connector Builder / Manifest Server load unintended Python classes from a declarative manifest custom component, even when AIRBYTE_ENABLE_UNSAFE_CODE was off, so a user who could submit a test-read manifest could run commands inside those containers. On Airbyte 2.x that needs Workspace Reader or Organization Reader (or higher); on Airbyte 1.x with the legacy Helm chart the Connector Builder ignored global.auth.enabled, so anyone who could reach that service could exploit it unauthenticated. Successful exploitation may expose credentials and secrets in the container and reach internal services. Fixed in Airbyte 2.2.0 (manifest-server 7.23.7); Airbyte 1.x will not get a fix and should upgrade to 2.2.0+. Airbyte Cloud is not affected. JVN#12040144 (published Nov 4 2026) states the flaw has been confirmed exploited in the wild. Workarounds until you upgrade: restrict network access to Connector Builder / Manifest Server to the Airbyte server only, and limit Reader roles to trusted users.",
  "language": "en",
  "_pwn": {
    "slug": "airbyte-connector-builder-rce-ghsa-g35w-6r6v-h4r7",
    "severity": "critical",
    "status": "live",
    "patchStatus": "patched",
    "rss": "https://pwn.watch/i/airbyte-connector-builder-rce-ghsa-g35w-6r6v-h4r7/feed.xml",
    "llms": "https://pwn.watch/i/airbyte-connector-builder-rce-ghsa-g35w-6r6v-h4r7/llms.txt",
    "json": "https://pwn.watch/i/airbyte-connector-builder-rce-ghsa-g35w-6r6v-h4r7.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/airbyte-connector-builder-rce-ghsa-g35w-6r6v-h4r7#2026-11-04-f4750e6f",
      "url": "https://pwn.watch/i/airbyte-connector-builder-rce-ghsa-g35w-6r6v-h4r7#2026-11-04-f4750e6f",
      "title": "Airbyte Connector Builder: arbitrary code execution via custom components even with unsafe code disabled (GHSA-g35w-6r6v-h4r7), exploited in the wild: JVN#12040144 publishes the Airbyte arbitrary code execution issue and states the vulnerability has been confirmed to be exploited in the wild; upgrade self-managed deployments to the latest version.",
      "content_text": "Airbyte Connector Builder: arbitrary code execution via custom components even with unsafe code disabled (GHSA-g35w-6r6v-h4r7), exploited in the wild: JVN#12040144 publishes the Airbyte arbitrary code execution issue and states the vulnerability has been confirmed to be exploited in the wild; upgrade self-managed deployments to the latest version.\n\nSource: https://jvn.jp/en/jp/JVN12040144/",
      "date_published": "2026-11-04T00:00:00.000Z",
      "external_url": "https://jvn.jp/en/jp/JVN12040144/",
      "tags": [
        "critical"
      ]
    },
    {
      "id": "https://pwn.watch/i/airbyte-connector-builder-rce-ghsa-g35w-6r6v-h4r7#2026-10-17-d90dcc30",
      "url": "https://pwn.watch/i/airbyte-connector-builder-rce-ghsa-g35w-6r6v-h4r7#2026-10-17-d90dcc30",
      "title": "Airbyte Connector Builder: arbitrary code execution via custom components even with unsafe code disabled (GHSA-g35w-6r6v-h4r7), exploited in the wild: Airbyte publishes GHSA-g35w-6r6v-h4r7 describing Connector Builder / Manifest Server arbitrary command execution via unrestricted custom-component class loading, fixed in 2.2.0; Airbyte 1.x will not receive a fix.",
      "content_text": "Airbyte Connector Builder: arbitrary code execution via custom components even with unsafe code disabled (GHSA-g35w-6r6v-h4r7), exploited in the wild: Airbyte publishes GHSA-g35w-6r6v-h4r7 describing Connector Builder / Manifest Server arbitrary command execution via unrestricted custom-component class loading, fixed in 2.2.0; Airbyte 1.x will not receive a fix.\n\nSource: https://github.com/airbytehq/airbyte/security/advisories/GHSA-g35w-6r6v-h4r7",
      "date_published": "2026-10-17T00:00:00.000Z",
      "external_url": "https://github.com/airbytehq/airbyte/security/advisories/GHSA-g35w-6r6v-h4r7",
      "tags": [
        "critical"
      ]
    },
    {
      "id": "https://pwn.watch/i/airbyte-connector-builder-rce-ghsa-g35w-6r6v-h4r7#2026-08-10-0f3b488d",
      "url": "https://pwn.watch/i/airbyte-connector-builder-rce-ghsa-g35w-6r6v-h4r7#2026-08-10-0f3b488d",
      "title": "Airbyte Connector Builder: arbitrary code execution via custom components even with unsafe code disabled (GHSA-g35w-6r6v-h4r7), exploited in the wild: Airbyte 2.2.0 is released for self-managed deployments, shipping manifest-server 7.23.7 and rejecting Connector Builder custom components unless AIRBYTE_ENABLE_UNSAFE_CODE=true.",
      "content_text": "Airbyte Connector Builder: arbitrary code execution via custom components even with unsafe code disabled (GHSA-g35w-6r6v-h4r7), exploited in the wild: Airbyte 2.2.0 is released for self-managed deployments, shipping manifest-server 7.23.7 and rejecting Connector Builder custom components unless AIRBYTE_ENABLE_UNSAFE_CODE=true.\n\nSource: https://docs.airbyte.com/release_notes/self-managed/v-2.2",
      "date_published": "2026-08-10T00:00:00.000Z",
      "external_url": "https://docs.airbyte.com/release_notes/self-managed/v-2.2",
      "tags": [
        "critical"
      ]
    }
  ]
}