Airbyte OneDrive Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Airbyte. Authentication is required to exploit this vulnerability. The specific flaw exists within the _get_shared_drive_object method. The issue results from the lack of prop [truncated]
This debrief provides an analysis of CVE-2026-92203, a Server-Side Request Forgery (SSRF) vulnerability in the Airbyte SharePoint Connector. The vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Airbyte, potentially disclosing information in the context of the service account. Affected product deployments should be verified, and owners assigned f [truncated]
