CVE-2026-59242

Name of the Vulnerable Software and Affected Versions Apache Airflow versions prior to 3.3.1

Description An authenticated API user with XCom write-and-read access can instantiate arbitrary airflow.* classes on the API server. This occurs because the GET /api/v2/{...}/xcomEntries/{key}?deserialize=true endpoint passes a string-literal payload through the BaseXCom.deserialize value() function without the check forbidden xcom keys guard. The issue is triggered when a user writes an XCom value and subsequently reads it back with the deserialize parameter set to true. This is a deserialization flaw, where untrusted data is used to abuse the logic of an application to execute unintended code or instantiate unauthorized objects.

Recommendations Upgrade to apache-airflow version 3.3.1 or later.