PT-2026-45371 · Apache · Apache Airflow

Anisto Mejin + 2 · Published 2026-06-01 · Updated 2026-06-01 · CVE-2026-42359

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Apache Airflow versions prior to 3.2.2

Description A bug in the XCom PATCH endpoint "PATCH /api/v2/xcomEntries/{key}" allows an authenticated UI/API user with XCom write permission on a Dag to set XCom entries using reserved key names, such as return value. While the POST endpoint validates against FORBIDDEN XCOM KEYS, the PATCH endpoint does not. Additionally, the endpoint accepts serialized payload shapes that the triggerer's deserializer treats as code. This combination enables Remote Code Execution (RCE) on the triggerer when the affected task next defers. This issue specifically affects deployments where untrusted users possess XCom write permissions on Dags that defer to the triggerer.

Recommendations Update to version 3.2.2 or later.

Fix

RCE

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2026-42359

PYSEC-2026-185

Affected Products

Apache Airflow

References · 7

• https://github.com/apache/airflow/pull/65915 · Patch
• https://lists.apache.org/thread/g8dqykpf1p90tysq8tln4qtkqwb1038s · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-42359 · Security Note
• https://osv.dev/vulnerability/PYSEC-2026-185 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-33858 · Security Note
• https://twitter.com/UpwindMDR/status/2061403416065179812 · Twitter Post
• https://t.me/CVEtracker/55452 · Telegram Post