Zero Radar
← feed
HighVulnerabilityCVE-2026-111422updated 29 Oct 2026, 11:22 UTC

Apache Airflow SSH provider can run hidden commands on remote hosts

A setting that should only pass plain text to a remote computer can instead be read as a command and run there. Someone who controls that text could make the remote machine run things they chose.

Fix availableOfficial, 2 sources
SeverityHighCVSS 8.8 of 10
Being exploited?UnclearNo reports either way yet
Fix available?YesApache Airflow SSH provider 7.0.1 or later · since 29 Oct 2026
How sure is this?Official, 2 sourcesBacked by an official source

How the attack works simplified

  1. 1Attacker supplies inputVia trigger-time params or similar
  2. 2Airflow DAG runsSSHRemoteJobOperator builds the script
  3. 3Value read as shell$(...) is executed, not quoted
  4. 4Remote SSH hostCommand runs with host access
  5. ResultAttacker runs commands on remote host

What happened

In the Apache Airflow SSH provider, the SSHRemoteJobOperator quotes values of its templated environment parameter only once, though they sit inside an already-quoted wrapper script, so shell syntax such as $(...) in a value gets executed on the remote SSH host.

Why it is dangerous: Anyone able to supply input to these environment values, such as trigger-time params, could run commands on the remote SSH host with that host's access rights.

Are you affected?

You are affected if you use the Apache Airflow SSH provider from version 4.3.0 up to (but not including) 7.0.1 with SSHRemoteJobOperator, and pass environment values that can include untrusted input such as params.

Apache Airflow SSH provider (apache-airflow-providers-ssh) 4.3.0 before 7.0.1

What to do

  1. Upgrade apache-airflow-providers-ssh to version 7.0.1 or later
  2. Review DAGs that pass params or other untrusted input into the SSHRemoteJobOperator environment setting
  3. Limit which users can trigger DAGs with custom parameters until the upgrade is done

Timeline

  1. 26 Oct 2026, 23:06 UTC
    Publicly disclosed
  2. 26 Oct 2026, 23:06 UTC
    Reported by oss-security · oss-security
  3. 26 Oct 2026, 23:16 UTC
    Picked up by Zero Radar
  4. 27 Oct 2026, 00:20 UTC
    NVD reported on it · NVD
  5. 29 Oct 2026, 11:22 UTC
    Severity raised to high

Sources 2 reports, oldest first

Official vendor, government CERT or advisory database

Security researchers research teams and mailing lists

Technical details

ID
CVE-2026-111422
CVSS
8.8 / 10
EPSS
0.6% chance of exploitation within 30 days
Disclosed
26 Oct 2026, 23:06 UTC
On Zero Radar
26 Oct 2026, 23:16 UTC (10 min after disclosure)
Last change
29 Oct 2026, 11:22 UTC

The plain-language parts and the attack diagram were written by an AI model (anthropic/claude-haiku-5.5) from the sources above. Facts like versions, exploitation and dates come from the sources themselves. How Zero Radar works

Apache Airflow SSH provider can run hidden commands on remote hosts · Zero Radar