{"id":"CVE-2026-111395","aliases":["EUVD-2026-119892","GHSA-r5x9-822m-2crg"],"status":"published","title":"Apache Airflow: Reserved serialization keys in Dag run conf crash the scheduler or are rebuilt as objects in the Triggerer via deadline callbacks","description":"Apache Airflow did not reject reserved serialization keys inside a Dag run's `conf`. A user allowed to trigger a Dag that uses a deadline alert with an asynchronous callback could pass a `conf` that, once the deadline was missed, either crashed the scheduler repeatedly or was rebuilt into objects inside the Triggerer. Users are advised to upgrade to apache-airflow 3.4.0 or later.","severity":{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-12","score":0.00293,"percentile":0.22159,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-502"],"published":"2026-11-09T09:18:35Z","modified":"2026-11-12T15:32:52Z","products":[{"vendor":"apache software foundation","product":"apache airflow"}],"references":[{"url":"https://github.com/apache/airflow/pull/74834","tags":["patch","fix"]},{"url":"https://lists.apache.org/thread.html/qb4qxr40s0q6w9b9t5mfw5qf53pg97p3","tags":["vendor-advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2026/11/09/13","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111395","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-r5x9-822m-2crg"},{"url":"https://pypi.python.org","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/111xxx/CVE-2026-111395.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-111395","title":"Apache Airflow: Reserved serialization keys in Dag run conf crash the scheduler or are rebuilt as objects in the Triggerer via deadline callbacks","description":"Apache Airflow did not reject reserved serialization keys inside a Dag run's `conf`. A user allowed to trigger a Dag that uses a deadline alert with an asynchronous callback could pass a `conf` that, once the deadline was missed, either crashed the scheduler repeatedly or was rebuilt into objects inside the Triggerer. Users are advised to upgrade to apache-airflow 3.4.0 or later.","status":"published","published":"2026-11-09T09:18:35.415Z","modified":"2026-11-12T15:00:11.009Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-502"],"updated_at":"2026-11-12T16:44:54.861164Z"}],"euvd":[{"id":"EUVD-2026-119892","description":"Apache Airflow did not reject reserved serialization keys inside a Dag run's `conf`. A user allowed to trigger a Dag that uses a deadline alert with an asynchronous callback could pass a `conf` that, once the deadline was missed, either crashed the scheduler repeatedly or was rebuilt into objects inside the Triggerer. Users are advised to upgrade to apache-airflow 3.4.0 or later.","status":"published","published":"2026-11-09T09:18:35Z","modified":"2026-11-12T15:00:11Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high"}],"updated_at":"2026-11-12T16:34:07.977467Z"}],"ghsa":[{"id":"GHSA-r5x9-822m-2crg","title":"Apache Airflow did not reject reserved serialization keys inside a Dag run's `conf`. A user...","description":"Apache Airflow did not reject reserved serialization keys inside a Dag run's `conf`. A user allowed to trigger a Dag that uses a deadline alert with an asynchronous callback could pass a `conf` that, once the deadline was missed, either crashed the scheduler repeatedly or was rebuilt into objects inside the Triggerer. Users are advised to upgrade to apache-airflow 3.4.0 or later.","status":"published","published":"2026-11-09T12:31:38Z","modified":"2026-11-12T15:32:52Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high"}],"cwes":["CWE-502"],"updated_at":"2026-11-12T15:41:49.292423Z"}],"nvd":[{"id":"CVE-2026-111395","description":"Apache Airflow did not reject reserved serialization keys inside a Dag run's `conf`. A user allowed to trigger a Dag that uses a deadline alert with an asynchronous callback could pass a `conf` that, once the deadline was missed, either crashed the scheduler repeatedly or was rebuilt into objects inside the Triggerer. Users are advised to upgrade to apache-airflow 3.4.0 or later.","status":"published","published":"2026-11-09T10:17:02.98Z","modified":"2026-11-12T15:17:36.83Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-502"],"updated_at":"2026-11-12T17:31:53.999237Z"}],"osv":[{"id":"CVE-2026-111395","title":"Apache Airflow: Reserved serialization keys in Dag run conf crash the scheduler or are rebuilt as objects in the Triggerer via deadline callbacks","description":"Apache Airflow did not reject reserved serialization keys inside a Dag run's `conf`. A user allowed to trigger a Dag that uses a deadline alert with an asynchronous callback could pass a `conf` that, once the deadline was missed, either crashed the scheduler repeatedly or was rebuilt into objects inside the Triggerer. Users are advised to upgrade to apache-airflow 3.4.0 or later.","status":"published","published":"2026-11-09T09:18:35.415Z","modified":"2026-11-12T02:30:27.668179202Z","cwes":["CWE-502"],"updated_at":"2026-11-11T03:22:04.464623Z"}]}}