Apache Airflow Sftp Provider
Monthly
Apache Airflow's SSH and SFTP provider hooks accept any server host key by default, so an attacker positioned as a machine-in-the-middle between an Airflow worker and an SSH or SFTP endpoint can impersonate that server and capture task credentials or transferred data. All releases of apache-airflow-providers-ssh and apache-airflow-providers-sftp before 7.0.0 are affected when a connection has neither host_key configured nor no_host_key_check explicitly disabled; the assessed vector is CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N, i.e. unauthenticated from the attacker's side but gated on the high-complexity MITM prerequisite, which is why the input's 9.1 rating overstates practical urgency. No public exploit code has been identified and EPSS is only 0.18% (7th percentile); vendor patches (provider 7.0.0) are released, and the related deferrable-SFTP path is tracked separately as CVE-2026-94135, which the same SFTP 7.0.0 release also fixes.
Apache Airflow's SFTP provider (apache-airflow-providers-sftp) omits SSH host-key verification in its deferrable code paths - SFTPTrigger, SFTPHookAsync and SFTPClientPool - because the no_host_key_check connection extra defaulted to permitting unknown hosts instead of requiring a known-hosts match. Any deployment that runs SFTP sensors or operators in deferrable mode while leaving that extra unset, supplying no host_key, and having no known_hosts entry is exposed: an unauthenticated attacker who holds a machine-in-the-middle position between the Airflow triggerer and the SFTP server can impersonate the server and capture the credentials and data exchanged (CWE-322; independent assessment scores it CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N). The vendor-released patch is apache-airflow-providers-sftp 7.0.0, which also fixes the sibling defect CVE-2026-94134 covering the synchronous SSH hook default; no public exploit code and no CISA KEV entry were identified at time of analysis, and the required MITM network position is the main factor limiting realistic risk.
Apache Airflow's SSH and SFTP provider hooks accept any server host key by default, so an attacker positioned as a machine-in-the-middle between an Airflow worker and an SSH or SFTP endpoint can impersonate that server and capture task credentials or transferred data. All releases of apache-airflow-providers-ssh and apache-airflow-providers-sftp before 7.0.0 are affected when a connection has neither host_key configured nor no_host_key_check explicitly disabled; the assessed vector is CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N, i.e. unauthenticated from the attacker's side but gated on the high-complexity MITM prerequisite, which is why the input's 9.1 rating overstates practical urgency. No public exploit code has been identified and EPSS is only 0.18% (7th percentile); vendor patches (provider 7.0.0) are released, and the related deferrable-SFTP path is tracked separately as CVE-2026-94135, which the same SFTP 7.0.0 release also fixes.
Apache Airflow's SFTP provider (apache-airflow-providers-sftp) omits SSH host-key verification in its deferrable code paths - SFTPTrigger, SFTPHookAsync and SFTPClientPool - because the no_host_key_check connection extra defaulted to permitting unknown hosts instead of requiring a known-hosts match. Any deployment that runs SFTP sensors or operators in deferrable mode while leaving that extra unset, supplying no host_key, and having no known_hosts entry is exposed: an unauthenticated attacker who holds a machine-in-the-middle position between the Airflow triggerer and the SFTP server can impersonate the server and capture the credentials and data exchanged (CWE-322; independent assessment scores it CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N). The vendor-released patch is apache-airflow-providers-sftp 7.0.0, which also fixes the sibling defect CVE-2026-94134 covering the synchronous SSH hook default; no public exploit code and no CISA KEV entry were identified at time of analysis, and the required MITM network position is the main factor limiting realistic risk.