Advisories · Technology

Apache Software Foundation Apache Airflow SFTP provider.

Every CVE that names Apache Software Foundation Apache Airflow SFTP provider among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-94135 CVE record

CVSS 4.3 Medium

Apache Airflow SFTP provider: Async SFTP hook disables host-key verification by default
- Apache Software Foundation Apache Airflow SFTP provider
- CWE-322
Not analysed yet 15 Oct 2026
CVE-2026-94134 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Apache Airflow SSH provider, Apache Airflow SFTP provider: SSH hook disables host-key verification by default
- Apache Software Foundation Apache Airflow SSH provider
- Apache Software Foundation Apache Airflow SFTP provider
- CWE-322
Not analysed yet 15 Oct 2026