Apache Airflow SSH provider vulnerabilities

2 known vulnerabilities in Apache Airflow SSH provider from Apache. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Apache Airflow SSH provider: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-111422Oct 27, 2026Apache

  In apache-airflow-providers-ssh before 7.0.1, SSHRemoteJobOperator quoted the values of its templated `environment` parameter only once, although they are placed inside an already-quoted wrapper script, so shell syntax such as `$(...)` in a value was executed

• 9.1 Critical severity

  Apache Airflow SSH provider: Key Exchange without Entity Authentication

  CVE-2026-94134Oct 15, 2026Apache

  The Apache Airflow SSH provider hook disables SSH host-key verification by default: unless `host_key` is configured or `no_host_key_check` is explicitly set to false, it accepts any server key. This affects SSH and SFTP connections that rely on the default. An