Known vulnerabilities in Apache Software Foundation Apache Airflow SSH provider
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-111422 | In apache-airflow-providers-ssh before 7.0.1, SSHRemoteJobOperator quoted the values of its templated `environment`… | Not rated | Oct 26, 2026 |
| CVE-2026-94134 | The Apache Airflow SSH provider hook disables SSH host-key verification by default: unless `host_key` is configured or… | Not rated | Oct 15, 2026 |