CVE-2026-49297
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk45th percentile - higher than 45% of all known CVEs
Summary
A vulnerability in Apache Airflow's Google provider operators `GCSToSFTPOperator` and `GCSTimeSpanFileTransformOperator` allows writing files outside the intended destination directory. An attacker with write access to the source GCS bucket can create an object with `..` segments in its name, leading to overwrite of arbitrary files on the SFTP server or the worker host.
Risk Assessment
The organization risks unauthorized overwrite of system files or data on the SFTP server and Airflow worker, potentially leading to privilege escalation, data integrity loss, or system compromise.
Recommendation
Immediately upgrade the `apache-airflow-providers-google` package to version 22.2.1 or later. Restrict write access to the GCS bucket to trusted principals only.
Original NVD description (English source)
Apache Airflow's Google provider operators `GCSToSFTPOperator` and `GCSTimeSpanFileTransformOperator` joined GCS object names returned by the bucket listing API directly to a destination filesystem path without normalisation or containment check. A user with write access to the source GCS bucket (typically a different trust principal than the DAG author — partner uploads, ingest-only service accounts, public-data buckets) could create an object whose name contains `..` segments and cause the DAG run to write the downloaded blob outside the configured destination (the SFTP `destination_path` for `GCSToSFTPOperator`; the worker-local temp directory for `GCSTimeSpanFileTransformOperator`), enabling overwrite of arbitrary files on the SFTP server or the worker host. Affects deployments that ingest from buckets writable by less-trusted principals. Users are advised to upgrade to `apache-airflow-providers-google` 22.2.1 or later.