CVE-2026-49818 Apache Airflow Samba provider: Path traversal in GCSToSambaOperator via GCS object names
An attacker with write access to a source GCS bucket can write files to arbitrary locations on the Samba target via path traversal in the GCSToSambaOperator.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-49818?
CVE-2026-49818 is a medium-severity path traversal vulnerability in Apache Airflow Samba provider, published on 9 Jun 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Apache Airflow Samba provider's `GCSToSambaOperator` joined GCS object names to the SMB destination path without a containment check, so an object named with `../` segments resolved a write path outside the configured `destination_path`. An attacker able to write objects into the source GCS bucket — typically an external data producer distinct from the trusted DAG author — could write files to arbitrary locations on the Samba target when the operator ran. Upgrade apache-airflow-providers-samba to 4.12.6 or later, which validates the resolved destination stays within `destination_path`.
Weakness: CWE-22
Which versions are affected by CVE-2026-49818?
3 open source packages ship an affected version, including apache-airflow-providers-samba. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
apache-airflow-providers-samba PyPI | All versions | 4.12.6 |
apache-airflow-providers-samba PyPI | All versions | 4.12.6 |
apache-airflow-providers-samba PyPI | All versions | 4.12.6 |
Products include Apache Apache-Airflow-Providers-Samba.
How do I fix CVE-2026-49818?
Upgrade apache-airflow-providers-samba to 4.12.6 or later.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2026-49818 being exploited?
There is no known exploitation of CVE-2026-49818 in the wild and no public exploit code.
Sources
Also known as GHSA-f6vj-48fm-hmvx, PYSEC-2026-208.