airflow-calendar (>=0.5.0, <=0.9.1), airflow-provider-great-expectations (1.0.0) +2 more potentially affected by CVE-2026-58076 via apache-airflow (>=3.3.0, <=3.3.1rc2)

apache-airflow PYPI version =3.3.0, =0.5.0, =1.3.0, =1.3.1rc2 Source cves: CVE-2026-58076 Source advisory: OSV:GHSA-8PRW-8M6X-8W6F...

airflow-balancer (>=0.7.0, <=0.7.6), airflow-calendar (>=0.5.0, <=0.9.1) +45 more potentially affected by CVE-2026-58076 via apache-airflow-core (>=3.0.0rc2, <=3.3.1rc2)

apache-airflow-core PYPI version =3.0.0rc2, =0.7.0, =0.5.0, =1.5.0, =0.6.1, =1.10.7, =0.6.0a1, =0.1.0, =1.4.3, =0.3.0, =1.2.10, =3.0.0rc3, =1.1.3rc1, =1.4.0 and more Source cves: CVE-2026-58076 Source advisory: SNYK:PYTHON-APACHEAIRFLOWCORE-18748601...

airflow-balancer (>=0.7.0, <=0.7.6), airflow-calendar (>=0.5.0, <=0.9.1) +44 more potentially affected by CVE-2026-58076 via apache-airflow (>=3.0.0, <=3.3.1rc2)

apache-airflow PYPI version =3.0.0, =0.7.0, =0.5.0, =1.5.0, =0.6.1, =1.10.7, =0.6.0a1, =0.1.0, =1.4.3, =0.3.0, =1.2.10, =3.0.0, =1.1.3rc1, =1.4.0 and more Source cves: CVE-2026-58076 Source advisory: MEND:CVE-2026-58076...

CVE-2026-58076

Apache Airflow CVE-2026-58076 describes an unguarded import_string() deserialization path in the serialization layer (BaseSerialization.deserialize) that can import and invoke arbitrary callables via a serialized blob placed in executor_config. The vulnerability can be triggered by a DAG author a...

CVE-2026-58076 Apache Airflow: Unguarded import_string() of airflow_exc_ser / base_exc_ser exception nodes in BaseSerialization.deserialize enables DAG-author RCE on Scheduler / API Server

Apache Airflow's serialization layer reconstructed exception nodes by calling importstring on a class name taken from the serialized blob and instantiating it with arguments from the same blob, with no restriction on what could be imported. An operator's executorconfig reaches that branch, so a D...