Skip to content

Apache Software Foundation Apache Airflow SSH provider

CVE-2026-111422 High 8.8 Apache Airflow SSH provider: SSHRemoteJobOperator: `environment` values are executed as shell on the remote host 0.6%
CVE-2026-94134 Critical 9.1 Apache Airflow SSH provider, Apache Airflow SFTP provider: SSH hook disables host-key verification by default 0.6%