CVE-2026-50203

A path traversal in the SFTP provider "SFTPHook.retrievedirectory" / "SFTPOperatoroperation=get" let a malicious or compromised remote SFTP server write files outside the configured local destination directory via crafted directory-entry names. No Airflow account is required — the attack surface ...

CVE-2026-50203: Improper Limitation of a Pathname to a Restricted Directory

A path traversal in the SFTP provider SFTPHook.retrievedirectory / SFTPOperatoroperation=get let a malicious or compromised remote SFTP server write files outside the configured local destination directory via crafted directory-entry names. No Airflow account is required — the attack surface is a...