{"id":"CVE-2026-86829","published":"2026-11-09T10:17:13.757","lastModified":"2026-11-10T21:12:56.703","description":"Apache Airflow's scheduler fully deserializes XCom values written by task code while evaluating task dependencies. A Dag author, who controls what a task writes to XCom, therefore controls data that is deserialized inside the scheduler process - a context the Airflow security model reserves for code installed by the Deployment Manager, above the worker-scoped execution capability a Dag author is documented to have. Deployments that treat Dag authors as less trusted than Deployment Managers are affected, and the scheduler must be evaluating a task dependency that reads a task-written XCom value. Users of apache-airflow are recommended to upgrade to version 3.4.0 or later, which restricts dependency evaluation to primitive XCom values.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-502"],"vendors":[],"products":[],"references":[{"url":"https://github.com/apache/airflow/pull/72718","tags":[]},{"url":"https://lists.apache.org/thread.html/2qbt7qnclrlxtg3f1b685533r3mvk9hv","tags":[]},{"url":"http://www.openwall.com/lists/oss-security/2026/11/09/9","tags":[]}],"exploitRefs":[{"url":"https://github.com/apache/airflow/pull/72718","tags":[]}],"hasPoc":true,"ai":null}