What is the CVSS score of CVE-2026-49818?

CVE-2026-49818 has a CVSS 3.1 base score of 6.5 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N. EPSS exploitation probability: 0.0%.

Which versions of Airflow Samba Provider are affected by CVE-2026-49818?

Apache Airflow's GCSToSambaOperator contains a critical path traversal vulnerability disclosed today (2026-06-09) that allows attackers who can influence GCS object names to write arbitrary files to…. A patch is available.

How to fix or mitigate CVE-2026-49818?

Within 24 hours: Inventory all Airflow deployments using GCSToSambaOperator and audit GCS bucket permissions. Within 7 days: Implement least-privilege access controls on GCS buckets, restrict Samba share write permissions, and consider disabling the operator if not essential. Within 30 days: Apply vendor patch immediately upon Apache Airflow release.

Airflow Samba Provider CVE-2026-49818

EUVD-2026-35374 MEDIUM

Path Traversal (CWE-22)

2026-06-09

GHSA-f6vj-48fm-hmvx

XSS Path Traversal Apache Apache Airflow Providers Samba

6.5

CVSS 3.1 · Vendor

Severity by source

Vendor (CNA) PRIMARY

6.5 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Primary rating from Vendor (CNA) · only source for this CVE.

CVSS VectorVendor

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

CVSS changed

Jun 09, 2026 - 17:22 NVD

6.5 (MEDIUM)

Patch available

Jun 09, 2026 - 10:01 EUVD

Analysis Generated

Jun 09, 2026 - 08:46 vuln.today

Description PRE-NVD

Disclosed via oss-security. NVD scoring and full description are pending.

Articles & Coverage 1

News Critical Path Traversal in Apache Airflow Samba Provider - CVE-2026-49818 Jun 09, 2026

AnalysisAI

Path traversal in Apache Airflow's Samba provider exposes Samba target file systems to arbitrary write operations when GCSToSambaOperator processes GCS object names containing directory traversal sequences. Disclosed on 2026-06-09 via the oss-security mailing list by Apache committer Jarek Potiuk as a pre-NVD disclosure, the vulnerability enables any party who can influence GCS object names in the source bucket to write files outside the intended destination directory on the Samba share. No public exploit code has been identified at time of analysis, and CVSS scoring is not yet available.

Technical ContextAI

GCSToSambaOperator is a transfer operator in the apache-airflow-providers-samba package that moves objects from Google Cloud Storage to a Samba (SMB/CIFS) file share. Path traversal vulnerabilities of this class - typically rooted in CWE-22 (Improper Limitation of a Pathname to a Restricted Directory) - arise when the operator constructs the destination file path by concatenating the configured Samba target directory with the GCS object name without stripping or rejecting directory separator characters and parent-directory references such as ../. An object named ../../airflow/dags/injected.py on GCS could cause the operator to write outside the intended Samba directory. No CWE identifier, CPE strings, or affected version ranges were included in the available disclosure data; all technical characterization is inferred from the operator's documented purpose and the vulnerability title.

RemediationAI

No vendor-released patch has been confirmed at time of analysis - this is a pre-NVD, pre-advisory disclosure. Monitor the Apache Airflow security advisories page and the apache-airflow-providers-samba PyPI release page for an updated package version. The oss-security disclosure is available at https://www.openwall.com/lists/oss-security/2026/06/09. As an immediate compensating control, restrict write permissions on all source GCS buckets consumed by GCSToSambaOperator to the minimum set of trusted service account identities, preventing untrusted parties from creating objects with traversal sequences in their names. Additionally, apply least-privilege Samba account permissions for the Airflow connection so that the account can only write within the explicitly intended directory, limiting the blast radius of any traversal. If GCSToSambaOperator is not actively required in production DAGs, removing or disabling the apache-airflow-providers-samba package eliminates exposure entirely until a patched release is available.