{"id":"CVE-2026-67260","aliases":[],"cve":{"records":[{"id":"CVE-2026-67260","source":"apache","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-07-29T10:04:08.525Z","published":"2026-08-12T15:33:02.858Z","modified":"2026-11-03T06:59:09.280Z"}],"publishers":[{"name":"apache","role":"CNA","organizationId":"f0158376-9dc2-43b6-827c-5f631a4d8d09","modified":"2026-11-03T06:59:09.280Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-08-12T16:00:19.739Z"}],"references":[{"url":"https://github.com/apache/airflow/pull/70685","tags":["patch"],"source":"apache"},{"url":"https://lists.apache.org/thread/vygr0fh82cjzjp5k4vtfmboxryvm3lyn","tags":["vendor-advisory"],"source":"apache"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-58076","tags":["related"],"source":"apache"}],"weaknesses":[{"id":"CWE-502","description":"CWE-502: Deserialization of Untrusted Data","source":"apache"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-08-12T16:00:14.166719Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"yes"},{"name":"Technical Impact","value":"partial"}]}]},"title":"Apache Airflow: DAG-author remote code execution on the Scheduler via awaiting_input next_kwargs deserialization","titleSource":"apache","descriptionSource":"apache","description":"Apache Airflow 3.3.0 moved human-in-the-loop tasks from the triggerer to a new `awaiting_input` task state swept by the scheduler. That sweep deserializes the task instance's `next_kwargs` without an allow-list, so a Dag author — who controls that value through the task execution API — can cause an arbitrary module import and object instantiation inside the scheduler process, or terminate the scheduler job. No non-default configuration is required: the sweep runs unconditionally every 15 seconds, and the default `allowed_deserialization_classes` setting does not cover this code path. Versions before 3.3.0 are not affected, because human-in-the-loop tasks deferred onto the triggerer instead. This is a different code path from CVE-2026-58076, which covers the same unguarded exception-node deserialization reached elsewhere — deployments that applied that fix must upgrade for this issue as well. Users are advised to upgrade to apache-airflow 3.3.1 or later.","score":7.3,"severity":"high","published":"2026-08-12T15:33:02.858Z","modified":"2026-11-03T06:59:09.280Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Apache Software Foundation","name":"Apache Airflow","platforms":[],"versions":[{"version":"3.3.0","status":"affected","lessThan":"3.3.1","versionType":"semver"}],"defaultStatus":"unaffected","packageURL":"pkg:pypi/apache-airflow-core","packageIdentity":{"ecosystem":"PyPI","name":"apache-airflow-core"},"cpes":[],"source":"apache","url":"https://www.cve.org/CVERecord?id=CVE-2026-67260"}],"remediation":[],"references":["https://github.com/apache/airflow/pull/70685","https://lists.apache.org/thread/vygr0fh82cjzjp5k4vtfmboxryvm3lyn","https://www.cve.org/CVERecord?id=CVE-2026-58076"],"sources":[{"name":"CVE","id":"CVE-2026-67260","modified":"2026-11-03T06:59:09.280Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-67260"}],"assessments":[{"source":"CISA-ADP","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","score":7.3}],"sourceAffected":[],"observedAt":"2026-11-03T07:11:29.769Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T00:20:33.177Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-03T07:15:34.313Z","attemptedAt":"2026-11-03T07:15:34.313Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-03T07:15:35.019Z","attemptedAt":"2026-11-03T07:15:35.019Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-03T07:15:35.920Z","attemptedAt":"2026-11-03T07:15:35.920Z"},{"source":"EPSS","status":"available","checkedAt":"2026-11-03T07:15:34.392Z","attemptedAt":"2026-11-03T07:15:34.392Z"}],"evidence":[{"source":"NVD","id":"CVE-2026-67260","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-67260","modified":"2026-10-24T16:10:00.153","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","checkedAt":"2026-11-03T07:15:34.313Z"},{"source":"FIRST EPSS","id":"CVE-2026-67260","url":"https://www.first.org/epss/","probability":0.00779,"percentile":0.55896,"date":"2026-11-02","checkedAt":"2026-11-03T07:15:34.392Z"},{"source":"GitHub Advisory Database","id":"GHSA-q4c3-7575-55j2","url":"https://github.com/advisories/GHSA-q4c3-7575-55j2","modified":"2026-10-02T23:15:50Z","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","checkedAt":"2026-11-03T07:15:35.019Z"},{"source":"ENISA EUVD","id":"EUVD-2026-57275","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-57275","modified":"Sep 16, 2026, 2:56:08 PM","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","checkedAt":"2026-11-03T07:15:35.920Z"}],"aiSummary":{"text":"Apache Airflow 3.3.0 is affected by a deserialization weakness, allowing a DAG author to potentially cause arbitrary module import and object instantiation or terminate the scheduler job. The issue is due to the deserialization of untrusted data in the `next_kwargs` value. An attacker with access to the task execution API can exploit this vulnerability.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-03T07:16:06.954Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-67260"}]}}