CVE-2026-94135: Apache Airflow SFTP provider: Async SFTP hook disables host-key verification by default
Apache Airflow's async SFTP hook disables SSH host-key checks by default, enabling machine-in-the-middle attacks.
CVE-2026-94135 affects the Apache Airflow SFTP provider before 7.0.0. Deferrable paths in SFTPTrigger, SFTPHookAsync, and SFTPClientPool disable SSH host-key verification unless the connection sets no_host_key_check to false. Sensors and operators running in deferrable mode are affected. An attacker in a machine-in-the-middle position could impersonate the SFTP server. Apache rates it moderate.
- Affects Apache Airflow SFTP provider before 7.0.0.
- Async hooks skip host-key verification unless explicitly configured.
- Deferrable SFTP sensors and operators are in scope.
- A network attacker can impersonate the remote SFTP server.
Vulnerabilities mentionedAll →
- CVE-2026-941354.3—Default SSH host-key check off in Airflow SFTP providerpublished · Apache Software Foundation apache-airflow-providers-sftp
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2026-94135 | Default SSH host-key check off in Airflow SFTP provider The Apache Airflow SFTP provider disables SSH host-key verification by default on its deferrable code paths (SFTPTrigger, SFTPHookAsync, and SFTPClientPool) unless a connection explicitly sets no_host_key_check to false. Deployments that run SFTP sensors or operators in deferrable mode are affected. An attacker in a machine-in-the-middle position between the Airflow triggerer and the SFTP server can impersonate that server and capture credentials or data exchanged in the session. This is a separate defect from CVE-2026-94134 (the synchronous SSH hook default); apache-airflow-providers-sftp 7.0.0 fixes both. No public proof-of-concept is known, the issue is not in CISA KEV, and exploitation in the wild is not known. |
Posted by Jarek Potiuk on Oct 15 Severity: moderate Affected versions: - Apache Airflow SFTP provider before 7.0.0 Description: The Apache Airflow SFTP provider's deferrable code paths (`SFTPTrigger`, `SFTPHookAsync`, `SFTPClientPool`) disable SSH host-key verification by default unless the connection explicitly sets `no_host_key_check` to false. Deployments that run SFTP sensors or operators in deferrable mode are affected. An attacker in a machine-in-the-middle...
This source does not provide full text. Read it at seclists.org.