Apache Airflow scheduler deserializes next_kwargs before dict check (CVE-2026-96285)
Original title: CVE-2026-96285: Apache Airflow: Scheduler: next_kwargs deserialized before the dict check, so resume data still invokes constructors
Deserialization of next_kwargs occurs before the dictionary check, allowing reconstruction of permitted nested objects in the scheduler.
Apache Airflow added a dict check for next_kwargs in version 3.3.1 to fix CVE-2026-67260, but the check follows full deserialization of the stored payload. Deserialization can reconstruct nested objects from classes in the allow-list, including Airflow's own. The flaw affects Apache Airflow versions 3.3.0 before 3.4.0.
- Fix for CVE-2026-67260 checks decoded next_kwargs is a dictionary
- check performed only after deserializing the whole stored payload
- deserialization reconstructs nested objects of classes in allow-list
- by default includes Airflow's own
Impact: arbitrary object reconstruction in scheduler
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-96285 | Deserialization of next_kwargs before dict check in Apache Airflow scheduler | — | — |
From the original article
Posted by Rahul Vats on Nov 08 Severity: moderate Affected versions: - Apache Airflow 3. 3. 0 before 3.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.