Apache AirflowGHSA-mc4f-r875-v87w
Apache Airflow: Unsafe Deserialization via Legacy Serialization Keys (__type/__var) Bypass in XCom API
High8.8CVE-2026-33858 · Published Apr 13, 2026 · updated Jun 5, 2026
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| apache-airflow PyPI | >= 3.1.8, < 3.2.0 | 3.2.0 |
Details and references
Dag Authors, who normally should not be able to execute code in the webserver context could craft XCom payload causing the webserver to execute arbitrary code. Since Dag Authors are already highly trusted, severity of this issue is Low. Users are recommended to upgrade to Apache Airflow 3.2.0, which resolves this issue.
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-502
- Also known as
- BIT-airflow-2026-33858, CVE-2026-33858, PYSEC-2026-20
More Apache Airflow advisories
All Apache Airflow| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Apr 13 | Apache Airflow: Secrets from Airflow config file logged in plain text in DAG run logs UI CVE-2025-66236Mediumfixed in 3.2.0 | Medium | 3.2.0 |
| Apr 15 | Apache Airlfow: Sensitive Azure Service Bus connection string (and possibly other providers) exposed to users with view access CVE-2026-25219Medium6.5fixed in 3.1.8 | Medium6.5 | 3.1.8 |
| Apr 9 | Apache Airflow: JWT token still valid after logout CVE-2025-57735Critical9.1fixed in 3.2.0 | Critical9.1 | 3.2.0 |
| Apr 9 | Apache Airflow has an authorization bypass in DagRun wait endpoint CVE-2026-34538Medium6.5fixed in 3.2.0 | Medium6.5 | 3.2.0 |
| Apr 16 | Apache Airflow: RCE by race condition in example_xcom dag CVE-2025-54550High8.1fixed in 3.2.0 | High8.1 | 3.2.0 |
| Apr 16 | Apache Airflow: JWT token appearing in logs CVE-2026-31987Medium7.5fixed in 3.2.0 | Medium7.5 | 3.2.0 |