CVE-2026-59242: CWE-502: Deserialization of Untrusted Data in Apache Software Foundation Apache Airflow
Apache Airflow's XCom `GET /api/v2/{...}/xcomEntries/{key}?deserialize=true` endpoint passed a string-literal payload through `BaseXCom.deserialize_value` without the `_check_forbidden_xcom_keys` guard, allowing an authenticated API user with XCom write-and-read access to instantiate arbitrary `airflow.*` classes on the API server (CWE-502). An authenticated user who can write an XCom value and then read it back with `deserialize=true` triggers the unsafe instantiation. Users are advised to upgrade to apache-airflow 3.3.1 or later, which rejects reserved XCom serialization keys submitted as JSON string literals.
AI Analysis
Technical Summary
The vulnerability (CWE-502) exists in Apache Airflow's XCom API endpoint GET /api/v2/{...}/xcomEntries/{key}?deserialize=true. It improperly deserializes string-literal payloads via BaseXCom.deserialize_value without enforcing the _check_forbidden_xcom_keys guard. An authenticated API user with XCom write and read access can exploit this to instantiate arbitrary airflow.* classes on the API server, potentially leading to unsafe behavior. The flaw is fixed in Apache Airflow version 3.3.1 and later by rejecting reserved XCom serialization keys submitted as JSON string literals.
Potential Impact
An authenticated user with XCom write and read permissions can exploit this vulnerability to instantiate arbitrary classes within the airflow namespace on the API server. This could lead to unsafe server-side behavior depending on the instantiated classes. No public exploits are known at this time.
Mitigation Recommendations
Users should upgrade to Apache Airflow version 3.3.1 or later, which includes a fix that rejects reserved XCom serialization keys submitted as JSON string literals. No other mitigation or temporary workaround is indicated.
CVE-2026-59242: CWE-502: Deserialization of Untrusted Data in Apache Software Foundation Apache Airflow
Description
Apache Airflow's XCom `GET /api/v2/{...}/xcomEntries/{key}?deserialize=true` endpoint passed a string-literal payload through `BaseXCom.deserialize_value` without the `_check_forbidden_xcom_keys` guard, allowing an authenticated API user with XCom write-and-read access to instantiate arbitrary `airflow.*` classes on the API server (CWE-502). An authenticated user who can write an XCom value and then read it back with `deserialize=true` triggers the unsafe instantiation. Users are advised to upgrade to apache-airflow 3.3.1 or later, which rejects reserved XCom serialization keys submitted as JSON string literals.
CVSS v3.1
Score 5.4medium
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability (CWE-502) exists in Apache Airflow's XCom API endpoint GET /api/v2/{...}/xcomEntries/{key}?deserialize=true. It improperly deserializes string-literal payloads via BaseXCom.deserialize_value without enforcing the _check_forbidden_xcom_keys guard. An authenticated API user with XCom write and read access can exploit this to instantiate arbitrary airflow.* classes on the API server, potentially leading to unsafe behavior. The flaw is fixed in Apache Airflow version 3.3.1 and later by rejecting reserved XCom serialization keys submitted as JSON string literals.
Potential Impact
An authenticated user with XCom write and read permissions can exploit this vulnerability to instantiate arbitrary classes within the airflow namespace on the API server. This could lead to unsafe server-side behavior depending on the instantiated classes. No public exploits are known at this time.
Mitigation Recommendations
Users should upgrade to Apache Airflow version 3.3.1 or later, which includes a fix that rejects reserved XCom serialization keys submitted as JSON string literals. No other mitigation or temporary workaround is indicated.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- apache
- Date Reserved
- 2026-07-04T00:17:45.922Z
- Cvss Version
- null
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a7c97cebf8831d539c533cb
Added to database: 08/12/2026, 15:57:02 UTC
Last enriched: 08/12/2026, 16:16:32 UTC
Last updated: 08/12/2026, 21:45:01 UTC
Views: 8
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.