CVE-2026-111422 | Apache Airflow SSH Provider up to 7.0.0 SSHRemoteJobOperator environment os command injection

October 27, 2026 Yanac

A vulnerability identified as critical has been detected in Apache Airflow SSH Provider up to 7.0.0. This vulnerability affects the function SSHRemoteJobOperator of the component SSH Provider. Performing a manipulation of the argument environment results in os command injection.

This vulnerability was named CVE-2026-111422. The attack may be initiated remotely. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More