CVE-2026-94135
Apache Airflow async SFTP hook disables host key verification by default
The deferrable SFTP code paths of the Apache Airflow SFTP provider skip SSH host key verification by default. A machine-in-the-middle can impersonate the server. NVD lists CVSS 3.1 4.3 (CISA ADP); OX Security says 8.1. Fixed in providers-sftp 7.0.0. Not in CISA KEV as of check.
By ThreatWire Desk · Published 15 Oct 2026 · Updated 19 Oct 2026
- CVSS
- 4.3
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
- Class
- Other
- Status
- No PoC
- KEV
- Not in CISA KEV
- 0-day
- No
- Vendor
- Apache
- Products
- Apache Airflow SFTP provider
- Affected
- apache-airflow-providers-sftp through 6.0.1, per OX Security. Applies to deployments that use SFTP sensors or operators in deferrable mode.
- Fixed
- apache-airflow-providers-sftp 7.0.0 or later. Apache says 7.0.0 fixes both this CVE and CVE-2026-94134.
- CWE
- CWE-322
- Published
- 15 Oct 2026
- Updated
- 19 Oct 2026
No public PoC is confirmed on this record.
CVE-2026-94135 covers the deferrable SFTP code paths of the Apache Airflow SFTP provider. Apache names SFTPTrigger, SFTPHookAsync and SFTPClientPool. They disable SSH host key verification by default unless the connection sets no_host_key_check to false.
Deployments that run SFTP sensors or operators in deferrable mode are affected. An attacker in a machine-in-the-middle position between the triggerer and the SFTP server can impersonate the server. They can capture credentials or data.
NVD lists CVSS 3.1 4.3 for this CVE, a score added by CISA ADP. OX Security rates both Airflow CVEs 8.1. GitHub's advisory rates this one medium. The scores disagree. Treat the exposure as real wherever default connections are used.
This is a separate defect from CVE-2026-94134, the synchronous SSH hook. Apache says apache-airflow-providers-sftp 7.0.0 fixes both.
ThreatWire found no public PoC that claims this CVE. The CVE is not in the CISA KEV catalog as of 19 October 2026. No exploitation has been reported.
What to do: upgrade providers-sftp to 7.0.0 or later. Set host key checking explicitly on existing connections.