Apache Airflow Serialization Vulnerability in Scheduler and API Server

CVE-2026-58076

What is CVE-2026-58076?

Apache Airflow contains a vulnerability in its serialization layer that permits an attacker to instantiate untrusted code. This vulnerability is exploited through the executor_config of Dags, allowing an operator to manipulate class imports from serialized blobs, potentially invoking dangerous callables like subprocess.check_output or builtins.eval. Notably, the issue arises in both the Scheduler and API server components, where Dag authors' code should remain unexecuted. To mitigate this risk, users are strongly urged to upgrade to Apache Airflow version 3.3.1 or later, which enforces restrictions on the imported classes to subclasses of BaseException, thus enhancing the security posture against such threats.

References