CVE-2026-94135 | Apache Airflow SFTP Provider up to 6.x Deferrable Code Paths no_host_key_check certificate validation

October 16, 2026 Yanac

A vulnerability marked as problematic has been reported in Apache Airflow SFTP Provider up to 6.x. Affected is an unknown function of the component Deferrable Code Paths. This manipulation of the argument no_host_key_check causes improper certificate validation.

This vulnerability is handled as CVE-2026-94135. The attack can be initiated remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More