The vulnerability (CWE-22) in Apache Airflow's Google provider involves improper limitation of a pathname to a restricted directory. Specifically, the GCSToSFTPOperator and GCSTimeSpanFileTransformOperator operators concatenate GCS object names returned by the bucket listing API directly to destination filesystem paths without normalization or containment checks. This allows an attacker with write access to the source GCS bucket to create object names containing '..' path segments, leading to path traversal. Consequently, the DAG run may write files outside the configured destination paths, enabling overwriting of arbitrary files on the SFTP server or the worker host. This affects versions of apache-airflow-providers-google prior to 22.2.1. The vulnerability requires that the attacker has write access to the source bucket, which is typically a different trust principal than the DAG author.

An attacker with write access to the source GCS bucket can exploit this vulnerability to cause the Airflow DAG run to write files outside the intended destination directory. This can lead to arbitrary file overwrite on the SFTP server or the Airflow worker host, potentially compromising system integrity or availability. The impact is limited to environments where the source bucket is writable by less-trusted principals.

Users should upgrade the apache-airflow-providers-google package to version 22.2.1 or later, where this path traversal vulnerability has been fixed. There is no indication that temporary mitigations or workarounds are available. Patch status is confirmed by the vendor advisory recommending upgrade to 22.2.1 or later.