AA
Product
Apache Airflow SFTP provider
3
CVEs
0
On KEV
9.1
Max CVSS
2
New 30D
Severity mix
Critical 2High 0Medium 1Low 0
Watch
Add Apache Airflow SFTP provider to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-94134 | 9.1 | Oct 15 | Apache Airflow SSH provider, Apache Airflow SFTP provider: SSH hook disables host-key verification by default Affected: before 7.0.0 |
| CVE-2026-50203 | 9.1 | Jun 17 | Apache Airflow SFTP provider: Path traversal in SFTPHook.retrieve_directory allows local file write outside the destination directory via malicious server-supplied directory-entry names Affected: before 5.8.1 |
Showing 2