EUVD-2026-23658
GHSA-6ffj-2wg2-w45j
Severity by source
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
10Blast Radius
ecosystem impact- 10 pypi packages depend on apache-airflow (1 direct, 9 indirect)
- 10 pypi packages depend on apache-airflow-core (2 direct, 8 indirect)
Ecosystem-wide dependent count for version 3.2.0 and other introduced versions.
DescriptionCVE.org
Dag Authors, who normally should not be able to execute code in the webserver context could craft XCom payload causing the webserver to execute arbitrary code. Since Dag Authors are already highly trusted, severity of this issue is Low.
Users are recommended to upgrade to Apache Airflow 3.2.0, which fixes the issue.
AnalysisAI
Deserialization vulnerability in Apache Airflow webserver (all versions before 3.2.0) allows network-accessible attackers to execute arbitrary code by injecting malicious XCom payloads, despite vendor-assigned Low severity due to the trusted Dag Author threat model. CVSS 9.8 Critical rating reflects unauthenticated network-based RCE capability (AV:N/PR:N), contradicting the description's trust assumption. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Attacker must possess Dag Author role permissions in Apache Airflow, which the vendor considers a highly trusted position. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | DATA CONFLICT REQUIRES CAREFUL INTERPRETATION: The CVSS 9.8 vector (AV:N/AC:L/PR:N/UI:N) indicates a critical remotely exploitable RCE requiring no authentication or user interaction, yet the vendor description assigns Low severity based on trust assumptions about Dag Authors. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker with Dag Author credentials (or exploiting weak authentication to obtain such access) crafts a malicious XCom value containing a serialized Python object with embedded code execution payloads. When submitting a workflow that produces this XCom value, the Airflow webserver deserializes the payload to display or process task outputs, triggering arbitrary code execution in the webserver's process context with full webserver privileges. … |
| Remediation | Upgrade to Apache Airflow 3.2.0 or later, which addresses the unsafe XCom deserialization flaw (vendor advisory: https://lists.apache.org/thread/6whgpkqbh12rvpfmvcg8b0vwlv4hq3po, fix PR: https://github.com/apache/airflow/pull/61641). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Audit all Airflow webserver instances for version <3.2.0 and assess network exposure (restrict webserver access to trusted internal networks only via firewall/WAF rules). …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Share
External POC / Exploit Code
Leaving vuln.today