{"id":"CVE-2026-86829","aliases":["EUVD-2026-119903","GHSA-xpfh-wwcc-hq9p"],"status":"published","title":"Apache Airflow: Deserialization of task-controlled XCom values in the Scheduler during dependency evaluation","description":"Apache Airflow's scheduler fully deserializes XCom values written by task code while evaluating task dependencies. A Dag author, who controls what a task writes to XCom, therefore controls data that is deserialized inside the scheduler process - a context the Airflow security model reserves for code installed by the Deployment Manager, above the worker-scoped execution capability a Dag author is documented to have. Deployments that treat Dag authors as less trusted than Deployment Managers are affected, and the scheduler must be evaluating a task dependency that reads a task-written XCom value. Users of apache-airflow are recommended to upgrade to version 3.4.0 or later, which restricts dependency evaluation to primitive XCom values.","epss":{"day":"2026-11-10","score":0.00283,"percentile":0.20973,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-502"],"published":"2026-11-09T09:52:44Z","modified":"2026-11-11T02:49:06Z","exploits":[{"source":"pocgithub","id":"googlesky/CVE-2026-86829","title":"googlesky/CVE-2026-86829","date":"2026-11-10","url":"https://github.com/googlesky/CVE-2026-86829"}],"products":[{"vendor":"apache software foundation","product":"apache airflow"}],"references":[{"url":"https://github.com/apache/airflow/pull/72718","tags":["patch","fix"]},{"url":"https://lists.apache.org/thread.html/2qbt7qnclrlxtg3f1b685533r3mvk9hv","tags":["vendor-advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2026/11/09/9","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86829","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-xpfh-wwcc-hq9p"},{"url":"https://pypi.python.org","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/86xxx/CVE-2026-86829.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-86829","title":"Apache Airflow: Deserialization of task-controlled XCom values in the Scheduler during dependency evaluation","description":"Apache Airflow's scheduler fully deserializes XCom values written by task code while evaluating task dependencies. A Dag author, who controls what a task writes to XCom, therefore controls data that is deserialized inside the scheduler process - a context the Airflow security model reserves for code installed by the Deployment Manager, above the worker-scoped execution capability a Dag author is documented to have. Deployments that treat Dag authors as less trusted than Deployment Managers are affected, and the scheduler must be evaluating a task dependency that reads a task-written XCom value. Users of apache-airflow are recommended to upgrade to version 3.4.0 or later, which restricts dependency evaluation to primitive XCom values.","status":"published","published":"2026-11-09T09:52:44.345Z","modified":"2026-11-09T10:13:19.317Z","cwes":["CWE-502"],"updated_at":"2026-11-09T11:32:58.17855Z"}],"euvd":[{"id":"EUVD-2026-119903","description":"Apache Airflow's scheduler fully deserializes XCom values written by task code while evaluating task dependencies. A Dag author, who controls what a task writes to XCom, therefore controls data that is deserialized inside the scheduler process - a context the Airflow security model reserves for code installed by the Deployment Manager, above the worker-scoped execution capability a Dag author is documented to have. Deployments that treat Dag authors as less trusted than Deployment Managers are affected, and the scheduler must be evaluating a task dependency that reads a task-written XCom value. Users of apache-airflow are recommended to upgrade to version 3.4.0 or later, which restricts dependency evaluation to primitive XCom values.","status":"published","published":"2026-11-09T09:52:44Z","modified":"2026-11-09T10:13:19Z","updated_at":"2026-11-09T15:17:15.365583Z"}],"ghsa":[{"id":"GHSA-xpfh-wwcc-hq9p","title":"Apache Airflow's scheduler fully deserializes XCom values written by task code while evaluating...","description":"Apache Airflow's scheduler fully deserializes XCom values written by task code while evaluating task dependencies. A Dag author, who controls what a task writes to XCom, therefore controls data that is deserialized inside the scheduler process - a context the Airflow security model reserves for code installed by the Deployment Manager, above the worker-scoped execution capability a Dag author is documented to have. Deployments that treat Dag authors as less trusted than Deployment Managers are affected, and the scheduler must be evaluating a task dependency that reads a task-written XCom value. Users of apache-airflow are recommended to upgrade to version 3.4.0 or later, which restricts dependency evaluation to primitive XCom values.","status":"published","published":"2026-11-09T12:31:42Z","modified":"2026-11-09T12:31:47Z","cwes":["CWE-502"],"updated_at":"2026-11-09T12:48:05.483669Z"}],"nvd":[{"id":"CVE-2026-86829","description":"Apache Airflow's scheduler fully deserializes XCom values written by task code while evaluating task dependencies. A Dag author, who controls what a task writes to XCom, therefore controls data that is deserialized inside the scheduler process - a context the Airflow security model reserves for code installed by the Deployment Manager, above the worker-scoped execution capability a Dag author is documented to have. Deployments that treat Dag authors as less trusted than Deployment Managers are affected, and the scheduler must be evaluating a task dependency that reads a task-written XCom value. Users of apache-airflow are recommended to upgrade to version 3.4.0 or later, which restricts dependency evaluation to primitive XCom values.","status":"published","published":"2026-11-09T10:17:13.757Z","modified":"2026-11-10T21:12:56.703Z","cwes":["CWE-502"],"updated_at":"2026-11-09T14:14:36.135874Z"}],"osv":[{"id":"CVE-2026-86829","title":"Apache Airflow: Deserialization of task-controlled XCom values in the Scheduler during dependency evaluation","description":"Apache Airflow's scheduler fully deserializes XCom values written by task code while evaluating task dependencies. A Dag author, who controls what a task writes to XCom, therefore controls data that is deserialized inside the scheduler process - a context the Airflow security model reserves for code installed by the Deployment Manager, above the worker-scoped execution capability a Dag author is documented to have. Deployments that treat Dag authors as less trusted than Deployment Managers are affected, and the scheduler must be evaluating a task dependency that reads a task-written XCom value. Users of apache-airflow are recommended to upgrade to version 3.4.0 or later, which restricts dependency evaluation to primitive XCom values.","status":"published","published":"2026-11-09T09:52:44.345Z","modified":"2026-11-11T02:49:06.795681524Z","cwes":["CWE-502"],"updated_at":"2026-11-11T03:21:16.313764Z"}]}}