Apache AirflowPYSEC-2026-3992
Apache Airflow's XCom `GET /api/v2/{...}/xcomEntries/{key}?deserialize=true`...
Medium5.4CVE-2026-59242 · Published Aug 12, 2026 · updated Sep 28, 2026
Apache Airflow's XCom `GET /api/v2/{...}/xcomEntries/{key}?deserialize=true` endpoint passed a string-literal payload through `BaseXCom.deserialize_value` without the `_check_forbidden_xcom_keys` guard, allowing an authenticated API user with XCom write-and-read access to instantiate arbitrary `airflow.*` classes on the API server (CWE-502). An authenticated user who can write an XCom value and then read it back with `deserialize=true` triggers the unsafe instantiation. Users are advised to upgrade to apache-airflow 3.3.1 or later, which rejects reserved XCom serialization keys submitted as JSON string literals.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| apache-airflow PyPI | < 3.3.1 | 3.3.1 |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
- Severity from
- the CVSS score
- Also known as
- BIT-airflow-2026-59242, CVE-2026-59242
More Apache Airflow advisories
All Apache Airflow| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Aug 12 | Apache Airflow's Backfill API authorized a request against a Dag id supplied by... High7.5Aug 12 | High7.5 | 3.3.1 |
| Aug 12 | Apache Airflow wrote Variable values and Connection `extra` contents to the...Medium6.5Aug 12 | Medium6.5 | 3.3.1 |
| Aug 12 | Apache Airflow's Task SDK did not mask the contents of a Variable whose JSON...Medium6.5Aug 12 | Medium6.5 | 3.3.1 |
| Aug 12 | Apache Airflow's asset materialization endpointMedium6.5Aug 12 | Medium6.5 | 3.3.1 |
| Aug 12 | Apache Airflow's Task SDK rebuilt a `Callback` object from serialized data by...High8.8Aug 12 | High8.8 | 3.3.1 |
| Aug 12 | Apache Airflow's environment-variable secrets backend resolved a team-scoped...Medium5.4Aug 12 | Medium5.4 | 3.3.1 |