PT-2026-45374 · Apache · Apache Airflow

Jarek Potiuk · Published 2026-06-01 · Updated 2026-06-01 · CVE-2026-45360

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Apache Airflow versions prior to 3.2.2

Description The scheduler-side deadline-reference decoder (SerializedCustomReference.deserialize reference) imports and dispatches arbitrary class paths from serialized state controlled by a DAG author without using an allowlist or plugin-registry gate. In deployments where DAG-author code is less trusted than the scheduler process, such as single-host deployments where the DAG bundle is importable from the scheduler process, an attacker could embed a custom DeadlineReference. This allows the attacker to specify a controlled module path, leading the scheduler to execute import string(...) and instantiate the class with an active SQLAlchemy session attached.

Recommendations Upgrade to version 3.2.2 or later.

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2026-45360

Affected Products

Apache Airflow

References · 5

• https://github.com/apache/airflow/pull/66737 · Patch
• https://lists.apache.org/thread/q227dghjwgfz8xsxrf2pwpz4wk43zm83 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-45360 · Security Note
• https://t.me/CVEtracker/55456 · Telegram Post
• http://openwall.com/lists/oss-security/2026/05/31/12 · Note