AIKIDO-2026-439177
apache-airflow is vulnerable to Deserialization of Untrusted Data
88
High Risk
This Affects:
apache-airflowTL;DR
BaseSerialization.deserialize() calls import_string() on class paths taken from serialized Dag data without restriction. When the scheduler or API server loads a serialized Dag, a Dag author can embed a crafted trigger that imports and executes arbitrary code in those processes. This crosses the boundary that Dag-author code must not run in the control plane. The fix constrains deserialization to an allow-list.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and Dag authors are less trusted than the scheduler or API server that load serialized Dags.
Background info
apache-airflow is vulnerable to Deserialization of Untrusted Data in versions 2.10.0 - 3.2.2.
How to fix this
Upgrade the apache-airflow library to the patch version.
Links
GitHub Release
Fix PRs
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.