CVE-2026-33264 — Vulnerability in apache-airflow — CVE Details

CRITICAL

Apache Airflow allows code execution through unsafe serialized DAG deserialization

Published July 7, 2026Updated September 4, 2026Source: osv

Summary

A bug in `BaseSerialization.deserialize()` allowed unrestricted `import_string()` of attacker-controlled class paths when the Scheduler / API Server loaded a serialized DAG: a DAG author could embed a malicious trigger into a DAG to gain remote code execution on the API Server / Scheduler process, crossing the Airflow security boundary that DAG-author code must never execute in those processes. Users are advised to upgrade to `apache-airflow` 3.3.0 or later. As a defense-in-depth mitigation, deployments where DAG-author trust is limited can restrict the `[core] allowed_deserialization_classes` config to a narrow allowlist.

Advisory Timeline

First published July 7, 2026 (97 days ago).
Last revised September 4, 2026 — 59 days after initial publication.

Remediation

Upgrade to the fixed version using your package manager.

pip

Update apache-airflow to 3.3.0 or later

pip install "apache-airflow>=3.3.0"

After upgrading, run your dependency scanner again to confirm the vulnerability is resolved.

Affected Packages (1)

Affects 1 ecosystem: pypi (1).

Package	Ecosystem	Affected	Fixed In
apache-airflow	pypi	1.10.0, 1.10.1, 1.10.10, 1.10.10rc1 (+290 more)	3.3.0

Vulnerability Classification

Common Weakness Enumeration (CWE) identifiers for this vulnerability type.

CWE-502
Deserialization of Untrusted DataMITRE

CVSS Score Breakdown

What the CVSS (Common Vulnerability Scoring System) 9.8 score means for each attack dimension.

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

Frequently Asked Questions

What is CVE-2026-33264?: Apache Airflow allows code execution through unsafe serialized DAG deserialization This vulnerability has been assigned a severity rating of CRITICAL (CVSS score: 9.8/10).
How do I check if my project is affected by CVE-2026-33264?: CVE-2026-33264 affects apache-airflow. Use GeekWala's free vulnerability scanner to check your dependencies against CVE-2026-33264 and 200,000+ other known vulnerabilities.

Severity & Exploitability

CVSS Score

9.8

Exploitation is straightforward and causes maximum impact. Patch immediately.

Also Known As

GHSA-2943-9672-r45w

BIT-airflow-2026-33264

PYSEC-2026-2082

Related CVEs

CVE-2025-67895
CRITICAL
CVE-2022-38649
CRITICAL
OS Command Injection in Apache Airflow
CVE-2023-22884
CRITICAL
Command Injection in Apache Airflow and Apache Airflow MySQL Provider
CVE-2025-57735
CRITICAL
Apache Airflow: JWT token still valid after logout
CVE-2022-40189
CRITICAL
OS Command Injection in Apache Airflow
CVE-2026-61447
CRITICAL
PraisonAI: CodeAgent Executes LLM-Generated Code Without Sandboxing and Leaks All Environment Secrets
CVE-2026-61445
CRITICAL
PraisonAI: AICoder Arbitrary File Write and Command Execution via LLM Tool Calls
CVE-2026-42252
CRITICAL
Apache Airflow vulnerable to Improper Neutralization of Special Elements Used in a Template Engine

Check if you're affected

Scan your dependencies to see if this vulnerability affects your projects.

Scan Your Dependencies