7.2

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-25917

CVE-2026-25917: Apache Airflow allows code execution through crafted XCom payloads

Dag Authors, who normally should not be able to execute code in the webserver context could craft XCom payload causing the webserver to execute arbitrary code. Since Dag Authors are already highly trusted, severity of this issue is Low. Users are recommended to upgrade to Apache Airflow 3.2.0, which fixes the issue.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-25917

CVE-2026-25917:

7.2

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
apache-airflow-core	pip	< 3.2.0	3.2.0

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability lies in the insecure deserialization of XCom values when generating extra operator links in the Apache Airflow web UI. The function airflow.serialization.definitions.operatorlink.XComLink.get_link was responsible for this. It directly called XComModel.deserialize_value on a value retrieved from XCom, which can be controlled by a DAG author. An attacker could create a crafted payload that, upon deserialization by the webserver process, would execute arbitrary code. The provided patch addresses this by removing the dangerous deserialize_value call and replacing it with a safe stringification method. This prevents the webserver from instantiating potentially malicious objects from XCom, mitigating the remote code execution risk.

Vulnerable functions

XComLink.get_link

airflow-core/src/airflow/serialization/definitions/operatorlink.py

The function `get_link` in the `XComLink` class previously used `XComModel.deserialize_value` to process XCom values for generating extra operator links. This created a deserialization vulnerability, as a DAG author could craft a malicious payload in an XCom value. When the webserver attempted to render the link, it would deserialize the payload, leading to arbitrary code execution. The patch replaces this unsafe deserialization with a safe string conversion.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.