{"id":"CVE-2026-82337","kind":"vulnerability","aliases":["CVE-2026-82337"],"related":[],"title":"Apache Airflow: Dag authors can construct allow-listed classes in scheduler","description":"Apache Airflow rebuilt deadline alert fields through generic deserialization, which imports and instantiates the class named in the serialized Dag, in the scheduler and API server. A Dag author could cause classes within Airflow's deserialization allow list to be constructed in those processes with arguments they control. Deployments whose Dags use deadline alerts are affected.\n\nThis is an incomplete fix of CVE-2026-45360, which only hardened the `reference` field; deployments that applied that fix remain affected through the `callback` and `interval` fields.\n\nUsers of apache-airflow are recommended to upgrade to 3.4.0 or later.","summary":"Apache Airflow rebuilds deadline alert fields through generic deserialization, which imports and instantiates classes named in a serialized Dag. A Dag author can construct classes on Airflow's deserialization allow list inside the scheduler and API server, using arguments they control.","severity":"high","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apache-airflow","api-server","runtime","scheduler","self-hosted"],"not_affected_if":["no-deadline-alerts","restricted-dag-authors"],"how_to_check":"- Check whether Dags use deadline alerts (`DeadlineAlert` or `deadline_alerts` in Dag code).\n- Check the installed version with `airflow version`; versions below `3.4.0` are in scope per the advisory.","fix":"- apache-airflow: upgrade to `3.4.0` or later.","status":"open","published_at":"2026-11-09T10:17:11+00:00","first_seen_at":"2026-11-09T10:25:49+00:00","triaged_at":"2026-11-09T10:26:40+00:00","updated_at":"2026-11-09T10:26:40+00:00","category":"runtime","confidence":0.6,"triage":{"at":"2026-11-09T10:26:40Z","model":"claude-haiku-5-5","output":{"fix":"- apache-airflow: upgrade to `3.4.0` or later.","reach":"network","title":"Apache Airflow: Dag authors can construct allow-listed classes in scheduler","impact":"high","summary":"Apache Airflow rebuilds deadline alert fields through generic deserialization, which imports and instantiates classes named in a serialized Dag. A Dag author can construct classes on Airflow's deserialization allow list inside the scheduler and API server, using arguments they control.","audience":"businesses","category":"runtime","nicknames":[],"who_cares":["apache-airflow","self-hosted","scheduler","api-server"],"confidence":0.6,"fix_status":"available","needs_auth":"yes","worst_case":"Allow-listed classes are constructed in scheduler with attacker arguments","analyst_note":"Confirm the affected version range and the CVE-2026-45360 relationship from the Apache Airflow security advisory; sources only state 3.4.0 as the recommended upgrade.","how_to_check":"- Check whether Dags use deadline alerts (`DeadlineAlert` or `deadline_alerts` in Dag code).\n- Check the installed version with `airflow version`; versions below `3.4.0` are in scope per the advisory.","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-deadline-alerts","restricted-dag-authors"],"who_is_affected":"Deployments whose Dags use deadline alerts are affected, since the flaw is in how the scheduler and API server rebuild those alert fields from serialized Dags. Dag authors are the ones who can craft the payload, so teams that restrict who can write Dags have a smaller exposure. This is an incomplete fix of CVE-2026-45360; deployments that applied that fix remain affected through the callback and interval fields.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"yes","severity_if_unknown":"high"},"cost_usd":0.000802,"input_tokens":4651,"output_tokens":674,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A,134C '-45360':135C '-82337':15A,18A '3.4.0':165C 'affect':126C,148C 'airflow':2A,21B,31B,56B,72C,104C,159C 'alert':34B,75C,124C 'allow':8A,59B,107C 'allow-list':7A 'apach':1A,20B,30B,71C,158C 'apache-airflow':19B,157C 'api':23B,65B,95C 'api-serv':22B 'appli':144C 'argument':68B,116C 'author':4A,51B,99C 'callback':151C 'caus':101C 'class':10A,43B,54B,85C,102C 'construct':6A,53B,111C 'control':70B,118C 'could':100C 'cve':13A,16A,133C 'dag':3A,48B,50B,90C,98C,121C 'deadlin':33B,74C,123C 'deploy':119C,142C 'deseri':38B,58B,79C,106C 'field':35B,76C,141C,154C 'fix':131C,146C 'generic':37B,78C 'harden':138C 'host':29B 'import':40B,81C 'incomplet':130C 'insid':61B 'instanti':42B,83C 'interv':153C 'later':167C 'list':9A,60B,108C 'name':44B,86C 'process':114C 'rebuild':32B 'rebuilt':73C 'recommend':161C 'refer':140C 'remain':147C 'runtim':25B 'schedul':12A,26B,63B,93C 'self':28B 'self-host':27B 'serial':47B,89C 'server':24B,66B,96C 'upgrad':163C 'use':67B,122C 'user':155C 'whose':120C 'within':103C","nicknames":[],"mitigations":[],"who_affected":"Deployments whose Dags use deadline alerts are affected, since the flaw is in how the scheduler and API server rebuild those alert fields from serialized Dags. Dag authors are the ones who can craft the payload, so teams that restrict who can write Dags have a smaller exposure. This is an incomplete fix of CVE-2026-45360; deployments that applied that fix remain affected through the callback and interval fields.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["apacheairflow","apiserver","high","runtime","scheduler","selfhosted"],"campaign_type":null,"search_a":"'-2026':14A,17A '-82337':15A,18A 'airflow':2A 'allow':8A 'allow-list':7A 'apach':1A 'author':4A 'class':10A 'construct':6A 'cve':13A,16A 'dag':3A 'list':9A 'schedul':12A","search_b":"'airflow':21B,31B,56B 'alert':34B 'allow':59B 'apach':20B,30B 'apache-airflow':19B 'api':23B,65B 'api-serv':22B 'argument':68B 'author':51B 'class':43B,54B 'construct':53B 'control':70B 'dag':48B,50B 'deadlin':33B 'deseri':38B,58B 'field':35B 'generic':37B 'host':29B 'import':40B 'insid':61B 'instanti':42B 'list':60B 'name':44B 'rebuild':32B 'runtim':25B 'schedul':26B,63B 'self':28B 'self-host':27B 'serial':47B 'server':24B,66B 'use':67B","search_c":"'-2026':134C '-45360':135C '3.4.0':165C 'affect':126C,148C 'airflow':72C,104C,159C 'alert':75C,124C 'allow':107C 'apach':71C,158C 'apache-airflow':157C 'api':95C 'appli':144C 'argument':116C 'author':99C 'callback':151C 'caus':101C 'class':85C,102C 'construct':111C 'control':118C 'could':100C 'cve':133C 'dag':90C,98C,121C 'deadlin':74C,123C 'deploy':119C,142C 'deseri':79C,106C 'field':76C,141C,154C 'fix':131C,146C 'generic':78C 'harden':138C 'import':81C 'incomplet':130C 'instanti':83C 'interv':153C 'later':167C 'list':108C 'name':86C 'process':114C 'rebuilt':73C 'recommend':161C 'refer':140C 'remain':147C 'schedul':93C 'serial':89C 'server':96C 'upgrad':163C 'use':122C 'user':155C 'whose':120C 'within':103C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-09T10:17:11+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-82337","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-82337","severity":null,"published_at":"2026-11-09T10:17:11+00:00","modified_at":"2026-11-09T10:17:11+00:00","first_seen_at":"2026-11-09T10:25:49+00:00","fetched_at":"2026-11-09T10:25:49+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}