CVE-2026-86829 · Package
NO FIX YET · SEE WHAT TO DO
Apache Airflow's scheduler fully deserializes XCom values that task code writes while it checks task dependencies. A DAG author, who should only control worker-level execution, can therefore feed crafted data into code running inside the scheduler process.
first public Nov 9, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Deployments that treat DAG authors as less trusted than Deployment Managers are affected, and only when the scheduler evaluates a task dependency that reads an XCom value written by task code. Deployments where DAG authors are fully trusted, or where no dependency reads task-written XCom values, have less exposure and can plan the upgrade normally.
Not affected if fully-trusted-dag-authors, no-xcom-dependencies
Who cares apache-airflow, data-pipelines, python, self-hosted
airflow version or pip show apache-airflow3.4.0 or later, which restricts dependency evaluation to primitive XCom valuesApache Airflow's scheduler fully deserializes XCom values written by task code while evaluating task dependencies. A Dag author, who controls what a task writes to XCom, therefore controls data that is deserialized inside the scheduler process - a context the Airflow security model reserves for code installed by the Deployment Manager, above the worker-scoped execution capability a Dag author is documented to have. Deployments that treat Dag authors as less trusted than Deployment Managers are affected, and the scheduler must be evaluating a task dependency that reads a task-written XCom value. Users of apache-airflow are recommended to upgrade to version 3.4.0 or later, which restricts dependency evaluation to primitive XCom values.
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.