{"cve":"CVE-2026-81914","nvd":{"published":"2026-09-29T10:17:12.530","modified":"2026-10-07T19:58:47.973","status":"Analyzed","description":"Apache Airflow's Google provider built Google Drive search expressions by interpolating file and folder names directly into single-quoted string literals, without escaping the quote character that delimits them. A name containing an apostrophe therefore terminated the literal early and appended clauses of the attacker's choosing to the query.\n\nThe names are frequently not written by the Dag author. In a wildcard `gcs_to_gdrive` transfer they come from the source bucket listing, so anyone able to create objects in that bucket controls them — typically an external data producer or an ingest-only service account, a different trust principal from the Dag author. An injected clause can broaden the match and so steer which file or folder the hook resolves: an upload can be directed into a folder the attacker named, and, because downloads select the most recently modified match, a download can return a file they placed rather than the one the Dag asked for.\n\nAffects deployments passing externally-sourced names to the Google Drive hook, including wildcard `gcs_to_gdrive` transfers from buckets writable by less-trusted principals. Users are advised to upgrade to `apache-airflow-providers-google` `22.6.0` or later, which escapes quote and backslash characters in every value interpolated into a Drive query.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","score":4.3},"cwes":["CWE-943"],"references":["https://github.com/apache/airflow/pull/72166","https://lists.apache.org/thread/90osv795jrqds051y7v3lcdzhsospooo","http://www.openwall.com/lists/oss-security/2026/09/29/13"],"products":["apache:apache-airflow-providers-google"],"source":"nvd","synced_at":"2026-10-19T22:56:48.555445741+00:00"},"epss":{"cve":"CVE-2026-81914","score":0.0047,"percentile":0.40418,"date":"2026-10-25"},"kev":null,"osv":[{"id":"PYSEC-2026-4187","url":"https://osv.dev/vulnerability/PYSEC-2026-4187","summary":"","modified":"2026-10-08T10:00:02.913095192Z","packages":[{"ecosystem":"PyPI","name":"apache-airflow-providers-google","purl":"pkg:pypi/apache-airflow-providers-google","ranges":["<22.6.0"],"fixed":["22.6.0"]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}