CVE-2026-111421

The Apache Airflow Task Execution API is vulnerable to a security flaw because it stores XCom values written by tasks without the reserved-key check applied in other areas. This allows a Dag author to write an XCom that, when viewed through the API with deserialization enabled , forces the API se...