CVE-2025-54550

creationtimestamp| type| source ---|---|--- 2026-04-15 01:12:30+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mjipohxqwd2c 2026-04-15 04:19:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjj256ksuv2m 2026-04-16 15:19:33+00:00| seen|...

CVE-2025-54550

The example_xcom DAG included in Apache Airflow documentation implements an unsafe pattern for reading values from XCom . This flaw could allow a UI user with permissions to modify XComs to achieve arbitrary code execution on the worker. While this does not affect official Airflow releases—as exa...