Airflow FTP provider: FTPS data channel sent in cleartext because PROT P was never issued

Impact

FTPSHook.get_conn() built an ftplib.FTP_TLS connection but never called prot_p(), so only the control channel was encrypted and every byte of file data crossed the network in the clear. Any DAG using FTPSHook or FTPSFileTransmitOperator therefore exposed file contents and in-transit credentials to anyone able to observe the data connection. On a GPU fleet Airflow is commonly the mover of datasets and model artifacts, so this is passive disclosure of whatever those DAGs transfer, to an attacker who only needs a position on the path. Integrity of the transfer is not affected per the vendor's scoring - the issue is confidentiality.

Who can reach it

A network attacker able to observe the FTPS data connection between the Airflow worker and the FTP server. No authentication to Airflow is required; the attacker needs a vantage point on the traffic path.

What to do

Upgrade apache-airflow-providers-ftp to 3.15.1 or later, which issues PROT P, and restart the Airflow workers and scheduler so the new provider is loaded. Treat any credentials carried over these transfers as exposed and rotate them.

References

Related entries

• rclone (local backend, --links): When rclone copies from an untrusted remote with --links, it recreates symlinksCVE-2026-54572 · rclone (local backend, --links)High
• Jenkins Script Security Plugin: Groovy sandbox escape via AST annotation extensions memberCVE-2026-57281 · Jenkins Script Security Plugin (Groovy sandbox, AST transformation annotations)High
• Airflow Backfill API: any Dag editor can read and cancel backfills belonging to other DagsCVE-2026-68968 · Apache Airflow Backfill API (authorization dependency id parsing)High
• GitLab CE/EE: improper input validation lets an unauthenticated user cause a denial of serviceCVE-2026-7427 · GitLab CE/EE (unauthenticated request path, improper input validation)High
• Splunk Enterprise Edge Processor sidecar: Prometheus metrics endpoint served without authenticationCVE-2026-76262 · Splunk Enterprise Edge Processor SPL2 Preview sidecar (Prometheus metrics endpoint)High
• Linux kernel nfsd: uncapped POSIX ACL entry count drives an O(n^2) sort in the NFS serverCVE-2026-89695 · Linux kernel nfsd (NFSv4 POSIX ACL decoder, sort_pacl_range)High