1 matches found
CVE-2026-45361: Key Exchange without Entity Authentication
Apache Airflow providers-google's ComputeEngineSSHHook disables SSH host-key verification by default, exposing SSH traffic between an Airflow worker and a Compute Engine VM to in-path network attackers who can intercept or modify the session. Users are advised to upgrade to...
8.1CVSS5.8AI score0.00803EPSS
SaveExploits0References4
20