CVE-2026-49297

Apache Airflow's Google provider operators `GCSToSFTPOperator` and `GCSTimeSpanFileTransformOperator` joined GCS object names returned by the bucket listing API directly to a destination filesystem path without normalisation or containment check. A user with write access to the source GCS bucket (typically a different trust principal than the DAG author — partner uploads, ingest-only service accounts, public-data buckets) could create an object whose name contains `..` segments and cause the DAG run to write the downloaded blob outside the configured destination (the SFTP `destination_path` for `GCSToSFTPOperator`; the worker-local temp directory for `GCSTimeSpanFileTransformOperator`), enabling overwrite of arbitrary files on the SFTP server or the worker host. Affects deployments that ingest from buckets writable by less-trusted principals. Users are advised to upgrade to `apache-airflow-providers-google` 22.2.1 or later.

• CWE-22

• https://github.com/apache/airflow/pull/67667Exploit, Issue Tracking, Patch
• https://lists.apache.org/thread/cb5nvoxsj1q7rv878cyqgtg150w0zglq?users@airflow.apache.orgMailing List, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2026/07/04/8Mailing List, Third Party Advisory

Published

Jul 6, 2026

Last Modified

Jul 8, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-49290Slopsmith is a self-contained web application for browsing, …7.6
• CVE-2026-49291mcp-memory-service is a semantic memory layer for AI applica…8.1
• CVE-2026-49293js-toml is a TOML parser for JavaScript, fully compliant wit…7.5
• CVE-2026-49294Valhalla is an open source routing engine and accompanying l…6.1
• CVE-2026-49295libde265 is an open source implementation of the h.265 video…7.1
• CVE-2026-49296Before apache-airflow 3.3.0, a user authorized to read one D…6.5
• CVE-2026-49298A bug in Apache Airflow's KubernetesExecutor caused JWT toke…8.8
• CVE-2026-49299In OpenStack Neutron before 28.0.1, the tagging controller e…5.3
• CVE-2026-4930SYMCRYPTO is the SiXG301's host side hardware engine accesse…7.1
• CVE-2026-4931Smart contract Marginal v1 performs unsafe downcast, allowin…8.6
• CVE-2026-49316Expected behavior violation in the in-vehicle network of the…4.6
• CVE-2026-49317Incorrect behavior order in the Infotainment / Digital Round…2.4