9.1

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-50203

CVE-2026-50203: Apache Airflow SFTP provider: Path traversal in SFTPHook.retrieve_directory allows local file write outside the destination directory via malicious server-supplied directory-entry names

A path traversal in the SFTP provider (SFTPHook.retrieve_directory / SFTPOperator(operation=get)) let a malicious or compromised remote SFTP server write files outside the configured local destination directory via crafted directory-entry names. No Airflow account is required — the attack surface is any deployment downloading directories from an untrusted SFTP server. Upgrade apache-airflow-providers-sftp to 5.8.1 or later.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-50203

CVE-2026-50203:

9.1

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

SSVC / BOD 26-04 ↗

Exploitation NoneAutomatable YesTech Impact Total

Select your environment

→SSVCScheduled60 days

Runtime reachability resolves your actual outcome.Book a demo

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
apache-airflow-providers-sftp	pip	< 5.8.1	5.8.1

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability exists in the apache-airflow-providers-sftp package, specifically within the SFTPHook class. The functions retrieve_directory and retrieve_directory_concurrently are used to download a directory from a remote SFTP server to a local path. The vulnerability arises because these functions construct the destination path for files and directories by using os.path.join with a path component (os.path.relpath(dir_path, remote_full_path)) that is derived from directory entries sent by the remote SFTP server. A malicious or compromised SFTP server can provide directory or file names containing '..' (dot-dot) path traversal sequences. The vulnerable code directly uses these crafted names to build the local path, causing files to be written outside the intended local destination directory. The patch introduces a new helper function, _validate_within_directory, which resolves the real paths of the base directory and the candidate write path, ensuring the candidate path is contained within the base directory before any write operation occurs. This validation is applied in both retrieve_directory and retrieve_directory_concurrently to fix the path traversal vulnerability.

Vulnerable functions

SFTPHook.retrieve_directory

providers/sftp/src/airflow/providers/sftp/hooks/sftp.py

The function constructs a local file path by joining a base directory with a relative path from a remote SFTP server. It fails to sanitize the remote path, which can contain '..' elements, allowing a malicious SFTP server to write files outside of the intended destination directory (path traversal).

SFTPHook.retrieve_directory_concurrently

providers/sftp/src/airflow/providers/sftp/hooks/sftp.py

The function constructs local file paths for concurrent download by joining a base directory with relative paths from a remote SFTP server. It fails to sanitize the remote paths, which can contain '..' elements, allowing a malicious SFTP server to write files outside of the intended destination directory (path traversal).

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.