Apache Airflow SSH provider: Command injection in SSHRemoteJobOperator (CVE-2026-111422)

Apache Airflow SSH provider versions 4.3.0 through 7.0.0 are vulnerable to command injection via the SSHRemoteJobOperator. The vulnerability stems from improper quoting of the templated environment parameter. Because the values are placed within an already-quoted wrapper script without sufficient escaping, an attacker providing malicious input (such as command substitution syntax $(...)) via DAG parameters can cause the remote SSH host to execute arbitrary shell commands.

Impact

Successful exploitation allows for remote code execution on the target host defined in the SSH connection. This may lead to unauthorized access to the target infrastructure, privilege escalation, or lateral movement from the Airflow environment to the SSH-connected system.

Recommendation

• Upgrade the apache-airflow-providers-ssh package to version 7.0.1 or later.
• Audit existing DAGs using SSHRemoteJobOperator to ensure that input passed into the environment parameter is strictly validated and does not contain shell metacharacters or command substitution sequences.