CVE-2026-59242 PUBLISHED

Apache Airflow: Arbitrary airflow.* class instantiation on the API server via the XCom deserialize endpoint

Assigner: apache
Reserved: 04.07.2026 Published: 12.08.2026 Updated: 12.08.2026

Apache Airflow's XCom GET /api/v2/{...}/xcomEntries/{key}?deserialize=true endpoint passed a string-literal payload through BaseXCom.deserialize_value without the _check_forbidden_xcom_keys guard, allowing an authenticated API user with XCom write-and-read access to instantiate arbitrary airflow.* classes on the API server (CWE-502). An authenticated user who can write an XCom value and then read it back with deserialize=true triggers the unsafe instantiation. Users are advised to upgrade to apache-airflow 3.3.1 or later, which rejects reserved XCom serialization keys submitted as JSON string literals.

Product Status

Vendor Apache Software Foundation
Product Apache Airflow
Versions Default: unaffected
  • affected from 0 to 3.3.1 (excl.)

Credits

  • localhost-detect (@localhost-detect) finder
  • Jarek Potiuk remediation developer

References

Problem Types

  • CWE-502: Deserialization of Untrusted Data CWE