---
id: CVE-2026-49297
aliases:
  - PYSEC-2026-2084
  - GHSA-v3mh-27qj-w836
title: >-
  Apache Airflow's Google provider operators `GCSToSFTPOperator` and
  `GCSTimeSpanFileTransformOperator` joined GCS object names returned by…
summary: >-
  Apache Airflow's Google provider operators `GCSToSFTPOperator` and
  `GCSTimeSpanFileTransformOperator` joined GCS object names returned by the
  bucket listing API directly to a destination filesystem path without
  normalisation or containme…
severity: high
cvss: 8.1
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H'
vendor: apache-airflow-providers-google
product: apache-airflow-providers-google
ecosystem: pip
affected:
  - apache-airflow-providers-google < 22.2.1
patched:
  - apache-airflow-providers-google 22.2.1
published: '2026-07-06'
updated: '2026-09-10'
sourceUpdated: '2026-09-10T11:15:08.155028031Z'
source: OSV
sourceUrl: 'https://osv.dev/vulnerability/PYSEC-2026-2084'
references:
  - url: 'http://www.openwall.com/lists/oss-security/2026/07/04/8'
  - url: >-
      https://lists.apache.org/thread/cb5nvoxsj1q7rv878cyqgtg150w0zglq?users@airflow.apache.org
  - url: 'https://github.com/apache/airflow/pull/67667'
  - url: 'https://github.com/advisories/GHSA-v3mh-27qj-w836'
tags:
  - osv
  - pip
epss: 0.00994
epssPercentile: 0.61054
ingestedAt: '2026-07-09T18:56:35.398Z'
---

## Overview

Apache Airflow's Google provider operators `GCSToSFTPOperator` and `GCSTimeSpanFileTransformOperator` joined GCS object names returned by the bucket listing API directly to a destination filesystem path without normalisation or containment check. A user with write access to the source GCS bucket (typically a different trust principal than the DAG author — partner uploads, ingest-only service accounts, public-data buckets) could create an object whose name contains `..` segments and cause the DAG run to write the downloaded blob outside the configured destination (the SFTP `destination_path` for `GCSToSFTPOperator`; the worker-local temp directory for `GCSTimeSpanFileTransformOperator`), enabling overwrite of arbitrary files on the SFTP server or the worker host. Affects deployments that ingest from buckets writable by less-trusted principals. Users are advised to upgrade to `apache-airflow-providers-google` 22.2.1 or later.

## Affected packages

- `apache-airflow-providers-google < 22.2.1`

## Remediation

Upgrade to a patched release:

- `apache-airflow-providers-google 22.2.1`