Read the docs
TI-2026-36483 Aliases CVE-2026-49297GHSA-v3mh-27qj-w836

Path traversal in Apache Airflow Google provider

Priority LOW 37CWE-22Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and GitHub.

Summary

Apache Airflow's Google provider operators `GCSToSFTPOperator` and `GCSTimeSpanFileTransformOperator` joined GCS object names returned by the bucket listing API directly to a destination filesystem path without normalisation or containment check. A user with write access to the source GCS bucket (typically a different trust principal than the DAG author — partner uploads, ingest-only service accounts, public-data buckets) could create an object whose name contains `..` segments and cause the DAG run to write the downloaded blob outside the configured destination (the SFTP `destination_path` for `GCSToSFTPOperator`; the worker-local temp directory for `GCSTimeSpanFileTransformOperator`), enabling overwrite of arbitrary files on the SFTP server or the worker host. Affects deployments that ingest from buckets writable by less-trusted principals. Users are advised to upgrade to `apache-airflow-providers-google` 22.2.1 or later.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00994 62nd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed Apache Airflow Google provider (Apache Software Foundation): 22.2.1apache-airflow-providers-google (PyPI): 22.2.1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ApacheApache Airflow Google providerbefore 22.2.122.2.1Patch availableCNA
—apache-airflow-providers-google (PyPI)before 22.2.122.2.1Patch availableGHSA-v3mh-27qj-w836
  • Apache Airflow Google provider VendorApache Affected before 22.2.1 Fixed in 22.2.1 Patch available CNA
  • apache-airflow-providers-google (PyPI) Vendor— Affected before 22.2.1 Fixed in 22.2.1 Patch available GHSA-v3mh-27qj-w836

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:apache:apache-airflow-providers-google:*:*:*:*:*:*:*:*before 22.2.1VulnerableApache
  • cpe:2.3:a:apache:apache-airflow-providers-google:*:*:*:*:*:*:*:* Versions before 22.2.1 Vulnerable ·Apache

Remediation

  • Fix · CNA Apache Airflow Google provider (Apache Software Foundation) Fixed in 22.2.1
  • Fix · GHSA-v3mh-27qj-w836 apache-airflow-providers-google (PyPI) Fixed in 22.2.1 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-49297
  2. 2026-10-03 Alias added: GHSA-v3mh-27qj-w836

References

Exploit 1

Advisory 3

Other 3

  • TI-2023-10968 Apache Airflow Google Provider: Google Cloud Sql Provider Remote Command Execution CVSS 3.1CRITICAL 9.8
  • TI-2023-10969 Apache Airflow Google Provider: Google Cloud Sql Provider Denial Of Service CVSS 3.1HIGH 7.5
  • TI-2026-33152 Apache Airflow Google provider: SSH host key verification disabled in… CVSS 3.1HIGH 8.1
  • TI-2026-48427 Apache Airflow Google provider: google Secret Manager backend: team scope is never… CVSS 3.1MEDIUM 6.5
  • TI-2026-56525 Apache Airflow Google provider: Google Drive query injection via unescaped file and folder names CVSS 3.1MEDIUM 4.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences