What is the CVSS score of EUVD-2026-23658?

EUVD-2026-23658 has a CVSS 3.1 base score of 7.2 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Apache Airflow are affected by EUVD-2026-23658?

Apache Airflow versions before 3.2.0 contain a critical deserialization vulnerability in the webserver that enables unauthenticated remote code execution through malicious XCom payload injection.. A patch is available.

How to fix or mitigate EUVD-2026-23658?

Within 24 hours: Audit all Airflow webserver instances for version <3.2.0 and assess network exposure (restrict webserver access to trusted internal networks only via firewall/WAF rules). Within 7 days: Patch all affected Airflow deployments to version 3.2.0 or later per vendor advisory. Within 30 days: Validate patch deployment across all environments and review XCom access controls and serialization policies to enforce principle of least privilege for DAG authors.

Apache Airflow EUVD-2026-23658

| CVE-2026-25917 HIGH

Deserialization of Untrusted Data (CWE-502)

2026-04-18 apache

GHSA-6ffj-2wg2-w45j

RCE Apache Deserialization Apache Airflow Apache Software Foundation

7.2

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.2 HIGH

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Severity Changed

Apr 22, 2026 - 14:22 NVD

CRITICAL HIGH

CVSS changed

Apr 22, 2026 - 14:22 NVD

9.8 (CRITICAL) 7.2 (HIGH)

Analysis Updated

Apr 21, 2026 - 14:57 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Apr 20, 2026 - 19:07 vuln.today

cvss_changed

Analysis Generated

Apr 20, 2026 - 16:22 vuln.today

CVSS changed

Apr 20, 2026 - 16:22 NVD

9.8 (CRITICAL)

EUVD ID Assigned

Apr 18, 2026 - 07:00 euvd

EUVD-2026-23658

Analysis Generated

Apr 18, 2026 - 07:00 vuln.today

Patch released

Apr 18, 2026 - 07:00 nvd

Patch available

CVE Published

Apr 18, 2026 - 06:20 nvd

HIGH 7.2

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

10 pypi packages depend on apache-airflow (1 direct, 9 indirect)
10 pypi packages depend on apache-airflow-core (2 direct, 8 indirect)

Ecosystem-wide dependent count for version 3.2.0 and other introduced versions.

DescriptionCVE.org

Dag Authors, who normally should not be able to execute code in the webserver context could craft XCom payload causing the webserver to execute arbitrary code. Since Dag Authors are already highly trusted, severity of this issue is Low.

Users are recommended to upgrade to Apache Airflow 3.2.0, which fixes the issue.

AnalysisAI

Deserialization vulnerability in Apache Airflow webserver (all versions before 3.2.0) allows network-accessible attackers to execute arbitrary code by injecting malicious XCom payloads, despite vendor-assigned Low severity due to the trusted Dag Author threat model. CVSS 9.8 Critical rating reflects unauthenticated network-based RCE capability (AV:N/PR:N), contradicting the description's trust assumption. EPSS 0.07% (22nd percentile) suggests low immediate exploitation likelihood. No active exploitation confirmed; vendor patch available in version 3.2.0 with public GitHub PR.

Technical ContextAI

Apache Airflow is a workflow orchestration platform where Dag Authors define task workflows. XCom (cross-communication) is Airflow's mechanism for passing data between tasks, traditionally stored and retrieved via serialization. This vulnerability stems from CWE-502 (Deserialization of Untrusted Data) where the webserver component improperly deserializes XCom payloads without sufficient validation. Attackers can craft malicious serialized objects that, when deserialized by the webserver, execute arbitrary Python code in the webserver's process context. The affected product CPE (cpe:2.3:a:apache_software_foundation:apache_airflow) covers all Airflow versions prior to 3.2.0. Python deserialization flaws typically involve pickle or similar unsafe serialization libraries that can instantiate arbitrary classes and invoke code during object reconstruction.

RemediationAI

Upgrade to Apache Airflow 3.2.0 or later, which addresses the unsafe XCom deserialization flaw (vendor advisory: https://lists.apache.org/thread/6whgpkqbh12rvpfmvcg8b0vwlv4hq3po, fix PR: https://github.com/apache/airflow/pull/61641). If immediate upgrade is not feasible, implement strict role-based access controls to ensure only highly trusted administrators hold Dag Author privileges, and audit existing Dag Authors for insider risk since the attack requires this role. Consider network segmentation to restrict webserver access to authenticated internal users only, reducing the practical attack surface despite the CVSS network vector rating. Deploy web application firewall rules to inspect and block suspicious XCom payloads if feasible, though deserialization attacks are difficult to detect at the network layer. Monitor webserver logs for unusual XCom operations or unexpected process executions. Note that restricting Dag Author privileges may impact legitimate workflow development workflows, requiring process adjustments.