EUVD-2026-21978
GHSA-mc4f-r875-v87w
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
7Blast Radius
ecosystem impact- 21 pypi packages depend on apache-airflow (11 direct, 10 indirect)
Ecosystem-wide dependent count for version 3.1.8.
DescriptionCVE.org
Dag Authors, who normally should not be able to execute code in the webserver context could craft XCom payload causing the webserver to execute arbitrary code. Since Dag Authors are already highly trusted, severity of this issue is Low.
Users are recommended to upgrade to Apache Airflow 3.2.0, which resolves this issue.
AnalysisAI
Remote code execution in Apache Airflow 3.1.x allows authenticated DAG Authors to execute arbitrary code in the webserver context through crafted XCom payloads exploiting insecure deserialization (CWE-502). Affects Apache Airflow versions 3.1.8 through <3.2.0. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Attacker must possess authenticated DAG Author credentials in Apache Airflow, which grants permissions to create and modify workflow definitions (Directed Acyclic Graphs). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Real-world risk is LOW despite the 8.8 CVSS score, a rare case where multiple signals align against the base score. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | A malicious DAG Author with legitimate credentials authenticates to an Apache Airflow 3.1.x instance and creates a new workflow containing a task that generates a crafted XCom payload embedded with serialized Python objects designed to execute system commands. When another task or the webserver retrieves and deserializes this XCom value, the malicious payload triggers arbitrary code execution in the webserver process context, allowing the attacker to read sensitive configuration files, modify workflow definitions beyond their intended permissions, or establish persistence mechanisms within the Airflow environment. … |
| Remediation | Upgrade to Apache Airflow 3.2.0, which fully resolves the insecure deserialization issue in XCom payload handling. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: inventory all Apache Airflow 3.1.8 through 3.1.x deployments and identify DAG Author role assignments. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Share
External POC / Exploit Code
Leaving vuln.today