Apache Airflow Critical Vulnerabilities CVE-2026-111395 and CVE-2026-68982
- Investigating(done)
- Trending(skipped)
- Workaround available(current)
- Resolved(upcoming)
Executive summary
Apache Airflow suffers from multiple critical vulnerabilities, including failure to reject reserved serialization keys in DAG run configurations leading to scheduler crashes, and an unvalidated authentication token issue in CeleryExecutor allowing arbitrary code execution for anyone able to write to the Celery broker. Affected users are advised to upgrade to version 3.4.0 or later.
Workaround available
Upgrade to apache-airflow 3.4.0 or later
Official fixApache Airflow failed to reject reserved serialization keys inside a Dag run's 'conf' and CeleryExecutor ran callback workloads without validating the workload's authentication token.
Evidence
3 reports · 3 CVEShow
- [1]CVE First reportApache Airflow: CVE-2026-111395 (Critical)(opens security advisory in a new tab)
Critical severity. Apache Airflow did not reject reserved serialization keys inside a Dag run's `conf`. A user allowed to trigger a Dag that uses a deadline alert with an asynchronous callback could pass a `conf` that, once the deadline was missed, either crashed the scheduler repeatedly or was rebuilt into objects inside the Triggerer. Users are advised to upgrade to apache-airflow 3.4.0 or later.
by Tenable 0upvotes 0comments
- [2]CVEApache Airflow's CeleryExecutor ran callback workloads (`ExecuteCallback`, used for deadline-alert callbacks) without va: CVE-2026-68982 (Critical)(opens security advisory in a new tab)
Critical severity. Apache Airflow's CeleryExecutor ran callback workloads (`ExecuteCallback`, used for deadline-alert callbacks) without validating the workload's authentication token. Anyone able to write to the Celery broker could enqueue a forged callback and execute arbitrary code on every CeleryExecutor worker, without Airflow credentials. Deployments using the CeleryExecutor are affected. Users are advised to upgrade to apache-airflow 3.4.0 or later, in which the worker claims the…
by Tenable 0upvotes 0comments93% match
- [3]CVEApache Airflow rebuilt deadline alert fields: CVE-2026-82337 (Critical)(opens security advisory in a new tab)
Critical severity. Apache Airflow rebuilt deadline alert fields through generic deserialization, which imports and instantiates the class named in the serialized Dag, in the scheduler and API server. A Dag author could cause classes within Airflow's deserialization allow list to be constructed in those processes with arguments they control. Deployments whose Dags use deadline alerts are affected. This is an incomplete fix of CVE-2026-45360, which only hardened the `reference` field;…
by Tenable 0upvotes 0comments94% match