Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Apache Airflow Samba provider's `GCSToSambaOperator` joined GCS object names to the SMB destination path without a containment check, so an object named with `../` segments resolved a write path outside the configured `destination_path`. An attacker able to write objects into the source GCS bucket — typically an external data producer distinct from the trusted DAG author — could write files to arbitrary locations on the Samba target when the operator ran. Upgrade apache-airflow-providers-samba to 4.12.6 or later, which validates the resolved destination stays within `destination_path`.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-06-09 | 3 | Disclosure2General1 |
| 2026-06-12 | 1 | Disclosure1 |
CVE-2026-49818: Apache Airflow Samba provider: Path traversal in GCSToSambaOperator via GCS object names https://www.openwall.com/lists/oss-security/2026/06/09/8
Post summary
Apache Airflow’s Samba provider has a disclosed path‑traversal vulnerability in GCSToSambaOperator via GCS object names, as reported on the Openwall security mailing list.
🚨*CVE* CVE-2026-49818 The Apache Airflow Samba provider's `GCSToSambaOperator` joined GCS object names to the SMB destination path without a containment check, so an object named with `../… https://www.cve.org/CVERecord?id=CVE-2026-49818 ----- Traducción: CVE-2026-49818 El … http://infoflow.cloud`
Post summary
The post announces CVE‑2026‑49818, describing a path‑traversal vulnerability in the Apache Airflow Samba provider’s GCSToSambaOperator due to missing containment checks.
CVE-2026-49818 The Apache Airflow Samba provider's `GCSToSambaOperator` joined GCS object names to the SMB destination path without a containment check, so an object named with `../… https://www.cve.org/CVERecord?id=CVE-2026-49818
Post summary
CVE-2026-49818 discloses a path‑traversal vulnerability in Apache Airflow’s Samba provider caused by joining GCS object names without proper containment checks.
CVE-2026-49818 Path Traversal in Apache Airflow Samba Provider GCSToSambaOperator https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-49818
Post summary
The text merely lists the CVE identifier and a generic link; it lacks specific technical or mitigation details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | apache | apache-airflow-providers-samba | - | - | - |