CVE-2026-58076: Apache Airflow Arbitrary Callable Execution via Exception Node Deserialization
Summary
CVE-2026-58076: Apache Airflow exception-node deserialization permits arbitrary callable execution. Affects apache-airflow versions >= 3.3.0, < 3.3.1. Fixed in 3.3.1. How to fix ↓
Also tracked for
- airflow · Bitnami
The same CVE-2026-58076 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Apache Airflow is an open-source platform designed to programmatically author, schedule, and monitor workflows. It allows users to define complex workflows as Directed Acyclic Graphs (DAGs) and provides a rich user interface to manage these workflows. However, due to its serialization layer, it is vulnerable to a significant security issue that permits arbitrary code execution through improperly handled exception nodes.
Vulnerability Detail
The vulnerability arises from Apache Airflow's serialization layer, which reconstructs exception nodes by calling 'import_string()' on class names extracted from serialized data. This process lacks restrictions on what can be imported, allowing a malicious actor to specify a callable in an operator's 'executor_config'. This could lead to the execution of arbitrary functions, such as 'subprocess.check_output' or 'builtins.eval', within the Scheduler and API server. Both components are critical as they handle sensitive metadata, including database credentials and JWT signing secrets. This vulnerability is distinct from CVE-2026-33264, which only addressed a different aspect of the deserialization process.
How To Fix
Latest published version: 3.3.2 as of 22 Oct 2026
pip install --upgrade "apache-airflow==3.3.2"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
3.3.1
This is the first release that contains the fix.
pip install --upgrade "apache-airflow==3.3.1"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There are no specific workarounds mentioned for this vulnerability. The best course of action is to upgrade to the patched version as soon as possible.
Conclusion
In summary, CVE-2026-58076 is a critical vulnerability in Apache Airflow that allows for arbitrary code execution through a flaw in the exception node deserialization process. Users are strongly advised to upgrade to version 3.3.1 or later to mitigate this risk.
See every vulnerability recorded for apache-airflow →
FAQ
CVE-2026-58076 is a vulnerability in Apache Airflow that allows arbitrary callable execution through exception node deserialization.
If exploited, this vulnerability can allow an attacker to execute arbitrary code within the Scheduler and API server, potentially compromising sensitive data.
Apache Airflow versions prior to 3.3.1 are affected by this vulnerability.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The CVSS score for this vulnerability is 8.8, indicating a high severity level.
References
Related vulnerabilities
Recent vulnerabilities recorded for apache-airflow.
