The Apache Airflow SFTP provider's deferrable code paths (SFTPTrigger, SFTPHookAsync, SFTPClientPool) disable SSH host-key verification by default unless the connection explicitly sets nohostkeycheck to false. Deployments that run SFTP sensors or operators in deferrable mode are affected. An attacker in a machine-in-the-middle position between the triggerer and the SFTP server can impersonate the server and capture the credentials or data exchanged.
Users of apache-airflow-providers-sftp are recommended to upgrade to apache-airflow-providers-sftp 7.0.0 or later. This is a separate defect from CVE-2026-94134 (the synchronous SSH hook default, which also affects the SFTP hook); users who applied the fix for one also need this release for the other - apache-airflow-providers-sftp 7.0.0 fixes both.
The Apache Airflow SSH provider hook disables SSH host-key verification by default: unless hostkey is configured or nohostkeycheck is explicitly set to false, it accepts any server key. This affects SSH and SFTP connections that rely on the default. An attacker in a machine-in-the-middle position between the worker and the SSH or SFTP server can impersonate the server and capture the credentials or data a task sends.
Users of apache-airflow-providers-ssh and apache-airflow-providers-sftp are recommended to upgrade to apache-airflow-providers-ssh 7.0.0 and apache-airflow-providers-sftp 7.0.0 or later. The deferrable SFTP code paths had the same default and are covered separately by CVE-2026-94135; apache-airflow-providers-sftp 7.0.0 fixes both.
Severity: moderate
Affected versions:
- Apache Airflow SSH provider before 7.0.0 - Apache Airflow SFTP provider before 7.0.0
Description:
The Apache Airflow SSH provider hook disables SSH host-key verification by default: unless hostkey is configured or nohostkeycheck is explicitly set to false, it accepts any server key. This affects SSH and SFTP connections that rely on the default. An attacker in a machine-in-the-middle position between the worker and the SSH or SFTP server can impersonate the server and capture the credentials or data a task sends.
Users of apache-airflow-providers-ssh and apache-airflow-providers-sftp are recommended to upgrade to apache-airflow-providers-ssh 7.0.0 and apache-airflow-providers-sftp 7.0.0 or later. The deferrable SFTP code paths had the same default and are covered separately by CVE-2026-94135; apache-airflow-providers-sftp 7.0.0 fixes both.
Credit:
Claude Security Scans (tool) Igor Stepansky, OX Security (finder) Jarek Potiuk (remediation developer)
References:
https://github.com/apache/airflow/pull/73419 https://www.cve.org/CVERecord?id=CVE-2026-94135 https://airflow.apache.org/ https://www.cve.org/CVERecord?id=CVE-2026-94134
Severity: moderate
Affected versions:
- Apache Airflow SFTP provider before 7.0.0
Description:
The Apache Airflow SFTP provider's deferrable code paths (SFTPTrigger, SFTPHookAsync, SFTPClientPool) disable SSH host-key verification by default unless the connection explicitly sets nohostkeycheck to false. Deployments that run SFTP sensors or operators in deferrable mode are affected. An attacker in a machine-in-the-middle position between the triggerer and the SFTP server can impersonate the server and capture the credentials or data exchanged.
Users of apache-airflow-providers-sftp are recommended to upgrade to apache-airflow-providers-sftp 7.0.0 or later. This is a separate defect from CVE-2026-94134 (the synchronous SSH hook default, which also affects the SFTP hook); users who applied the fix for one also need this release for the other - apache-airflow-providers-sftp 7.0.0 fixes both.
Credit:
Claude Security Scans (tool) Igor Stepansky, OX Security (finder) Jarek Potiuk (remediation developer)
References:
https://github.com/apache/airflow/pull/73419 https://www.cve.org/CVERecord?id=CVE-2026-94134 https://airflow.apache.org/ https://www.cve.org/CVERecord?id=CVE-2026-94135
A path traversal in the SFTP provider (SFTPHook.retrievedirectory / SFTPOperator(operation=get)) let a malicious or compromised remote SFTP server write files outside the configured local destination directory via crafted directory-entry names. No Airflow account is required — the attack surface is any deployment downloading directories from an untrusted SFTP server. Upgrade apache-airflow-providers-sftp to 5.8.1 or later.
Severity: moderate
Affected versions:
- Apache Airflow SFTP provider (apache-airflow-providers-sftp) before 5.8.1
Description:
A path traversal in the SFTP provider (SFTPHook.retrievedirectory / SFTPOperator(operation=get)) let a malicious or compromised remote SFTP server write files outside the configured local destination directory via crafted directory-entry names. No Airflow account is required — the attack surface is any deployment downloading directories from an untrusted SFTP server. Upgrade apache-airflow-providers-sftp to 5.8.1 or later.
Credit:
secuholic (finder) Venkatraman Kumar (r3dw0lfsec), Securin (finder) Jarek Potiuk (remediation developer)
References:
https://github.com/apache/airflow/pull/67985 https://airflow.apache.org/ https://www.cve.org/CVERecord?id=CVE-2026-50203