Researchers
Back
Mahammad Huseynkhanli
#43736
of 60,387
7.2
Total CVSS
Vulnerabilities
·
1
PT-2026-33583
2026-04-17
7.2
CVE-2026-25917
Apache
Apache Airflow
Dag Authors can craft an XCom payload that allows the webserver to execute arbitrary code, bypassing the restriction that normally prevents them from executing code in the webserver context.