Apache Airflow XCom API permits unsafe deserialization through JSON string literals

TRUNG BÌNH 5.4CVE-2026-59242 · BIT-airflow-2026-59242 · GHSA-fcmm-42r9-mmmm · Công bố 12/08/2026 · cập nhật 24/10/2026

Tóm tắt nhanh

CVE-2026-59242 là lỗ hổng mức TRUNG BÌNH (CVSS 5.4) ảnh hưởng apache-airflow, airflow (apache).
Xác suất bị khai thác trong 30 ngày tới (EPSS): 0.53%, cao hơn 44.8% các lỗ hổng khác.
Cách xử lý: cập nhật lên 3.3.1 hoặc mới hơn.

Gói / sản phẩm	Phiên bản bị ảnh hưởng	Phiên bản đã vá
apache-airflow PyPI	`< 3.3.1`	`3.3.1`
airflow apache	`< 3.3.1`	`3.3.1`

Mô tả

Apache Airflow's XCom GET /api/v2/{...}/xcomEntries/{key}?deserialize=true endpoint passed a string-literal payload through BaseXCom.deserialize_value without the _check_forbidden_xcom_keys guard, allowing an authenticated API user with XCom write-and-read access to instantiate arbitrary airflow.* classes on the API server (CWE-502). An authenticated user who can write an XCom value and then read it back with deserialize=true triggers the unsafe instantiation. Users are advised to upgrade to apache-airflow 3.3.1 or later, which rejects reserved XCom serialization keys submitted as JSON string literals.

Mô tả của NVD

Apache Airflow's XCom `GET /api/v2/{...}/xcomEntries/{key}?deserialize=true` endpoint passed a string-literal payload through `BaseXCom.deserialize_value` without the `_check_forbidden_xcom_keys` guard, allowing an authenticated API user with XCom write-and-read access to instantiate arbitrary `airflow.*` classes on the API server (CWE-502). An authenticated user who can write an XCom value and then read it back with `deserialize=true` triggers the unsafe instantiation. Users are advised to upgrade to apache-airflow 3.3.1 or later, which rejects reserved XCom serialization keys submitted as JSON string literals.