Skip to content
NewA calmer, faster ZeroHour
StoryVulnerabilityhigh

Airflow CeleryExecutor flaw lets broker writers run code on workers

3 sources · 3 articlesFirst reported Updated ()
What's new

November 10: 3.4.0, released November 6, redeems a single-use token before callbacks; Apache published no CVSS; Reflectiz said 198 of 211 reachable Redis brokers lacked authentication.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

Airflow before 3.4.0 can run forged Celery callbacks as code on workers; 3.4.0 is the only fix and no in-the-wild exploitation is reported.

Apache Airflow before 3.4.0, when using CeleryExecutor, accepts unauthenticated ExecuteCallback messages on the Celery broker and runs them on workers without Airflow credentials. Anyone who can write to the broker can enqueue a forged callback that imports and calls a chosen Python function. Or Sahar of Reflectiz found the missing-authentication issue, classified as CWE-306 and rated Important by Apache, and confirmed it on 3.2.1 and 3.3.0 in lab setups. Deadline Alerts need not be enabled. Airflow 3.4.0, released November 6, 2026, is the only fix and redeems a single-use token before any callback runs. A public proof of concept exists; reports do not say the flaw is exploited in the wild.

Key facts
  • CVE-2026-68982 affects Airflow before 3.4.0 using CeleryExecutor.
  • Apache rates it Important; no CVSS score has been published.
  • ExecuteTask messages carry a signed JWT; callbacks were not checked.
  • Reflectiz confirmed the issue on 3.2.1 and 3.3.0 in lab setups.
  • According to Reflectiz, 198 of 211 reachable Redis brokers answered without authentication.
  • 3.4.0, released November 6, 2026, is the only stated fix.
Analyze CVE-2026-68982 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Timeline

dated events in the reporting · oldest first
  1. Nov 6, 2026Apache Airflow 3.4.0 released as the only fix. · Cyber Security News

What each outlet adds

beyond the shared facts
  • oss-securityAdvisory: forged callbacks run on every CeleryExecutor worker without credentials.
  • GBHackersNames Or Sahar; lab confirmation on 3.2.1 and 3.3.0; public PoC, no in-the-wild claim.
  • Cyber Security NewsNov. 6 single-use token fix, no CVSS, and 198 of 211 Redis brokers unauthenticated.
CVEs
CVE-2026-68982
Vendors
Apache
Products
Apache AirflowAirflow
Organizations
Reflectiz

Coverage

oldest first · one row per article · UTC
  1. · 2d ago oss-securityFirst report

    Apache Airflow CeleryExecutor vulnerability allows forged callback workloads

    Apache Airflow CeleryExecutor ran callback workloads without workload-token validation, allowing arbitrary code execution on Celery workers.

  2. · 1d ago GBHackers

    Apache Airflow before 3.4.0 allows unauthenticated RCE via Celery

    A public proof of concept shows a broker message can invoke any importable Python function without Airflow credentials.

  3. · 1d ago Cyber Security News

    Apache Airflow before 3.4.0 allows unauthenticated RCE via Celery (CVE-2026-68982)

    Write access to the Celery broker is enough; 3.4.0 redeems a single-use token before any callback runs.

Vulnerabilities in this story

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-68982
Arbitrary code execution in Apache Airflow CeleryExecutor via forged callbacks
——