---
title: JPCERT/CC: critical Airbyte code-execution flaw is being exploited in the wild; self-managed Airbyte before 2.2.0 must upgrade | ctxsec
url: https://ctxsec.com/items/airbyte-connector-builder-rce-exploited-jvn12040144-upgrade-2-2-0
description: "JPCERT/CC's JVN#12040144 (Nov 4) says a critical Airbyte flaw is confirmed exploited in the wild. In self-managed Airbyte before 2.2.0, the Connector Builder and Manifest Server didn't restrict which Python classes a declarative manifest could load as a custom component, so anyone able to submit a manifest could run commands in that container, even with AIRBYTE_ENABLE_UNSAFE_CODE off. On 2.x that needs Workspace Reader access or higher; on 1.x with the legacy Helm chart the Connector Builder could be reached with no login at all. Fixed in 2.2.0; 1.x gets no fix. Airbyte Cloud needs no action."
status: "official (JPCERT/CC JVN#12040144, Nov 4: exploitation confirmed in the wild; Airbyte advisory GHSA-g35w-6r6v-h4r7)"
published: 2026-11-04
---

> JPCERT/CC's JVN#12040144 (Nov 4) says a critical Airbyte flaw is confirmed exploited in the wild. In self-managed Airbyte before 2.2.0, the Connector Builder and Manifest Server didn't restrict which Python classes a declarative manifest could load as a custom component, so anyone able to submit a manifest could run commands in that container, even with AIRBYTE_ENABLE_UNSAFE_CODE off. On 2.x that needs Workspace Reader access or higher; on 1.x with the legacy Helm chart the Connector Builder could be reached with no login at all. Fixed in 2.2.0; 1.x gets no fix. Airbyte Cloud needs no action.

[← Cybersecurity News](/news) · [markdown](/items/airbyte-connector-builder-rce-exploited-jvn12040144-upgrade-2-2-0.md)

official (JPCERT/CC JVN#12040144, Nov 4: exploitation confirmed in the wild; Airbyte advisory GHSA-g35w-6r6v-h4r7)

2026-11-04

### JPCERT/CC: critical Airbyte code-execution flaw is being exploited in the wild; self-managed Airbyte before 2.2.0 must upgrade

- **Fix:** upgrade to Airbyte 2.2.0 or later (ships manifest-server / airbyte-cdk 7.23.7). Airbyte 1.x will not be patched.
- **If you can't upgrade yet (per Airbyte):** make the Connector Builder / Manifest Server reachable only from the Airbyte server, and limit Workspace Reader and Organization Reader roles to trusted users.
- **Assume exposure if it was reachable:** Airbyte containers hold credentials for the databases, APIs and warehouses it syncs. If an unpatched instance was reachable by untrusted users or networks, review container logs and rotate the connection secrets it holds.
- **Not public:** JPCERT/CC hasn't named attackers, victim counts or indicators.

Sources: [JPCERT/CC JVN#12040144: Airbyte vulnerable to arbitrary code execution (Nov 4)](https://jvn.jp/en/jp/JVN12040144/) · [Airbyte advisory GHSA-g35w-6r6v-h4r7](https://github.com/airbytehq/airbyte/security/advisories/GHSA-g35w-6r6v-h4r7)