CVE-2026-33264 Details
Description
A bug in `BaseSerialization.deserialize()` allowed unrestricted `import_string()` of attacker-controlled class paths when the Scheduler / API Server loaded a serialized DAG: a DAG author could embed a malicious trigger into a DAG to gain remote code execution on the API Server / Scheduler process, crossing the Airflow security boundary that DAG-author code must never execute in those processes. Users are advised to upgrade to `apache-airflow` 3.3.0 or later. As a defense-in-depth mitigation, deployments where DAG-author trust is limited can restrict the `[core] allowed_deserialization_classes` config to a narrow allowlist.
A remote code execution vulnerability exists in Apache Airflow versions prior to 3.3.0. The issue arises in the BaseSerialization.deserialize() method, where unrestricted deserialization of attacker-controlled class paths is allowed. This vulnerability enables a DAG author to embed a malicious trigger within a serialized Directed Acyclic Graph (DAG), which could then be executed on the API Server or Scheduler process. This exploitation crosses the security boundary in Airflow, where code authored in DAGs should not execute in these processes.
Users are advised to upgrade to Apache Airflow version 3.3.0 or later. In addition, for deployments where trust in DAG authors is limited, the '[core] allowed_deserialization_classes' configuration can be restricted to a narrow allowlist.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 7, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| http://www.openwall.com/lists/oss-security/2026/07/07/1 | CVE | Third Party AdvisoryMailing List |
| https://github.com/apache/airflow/pull/66002 | [email protected] | Issue TrackingPatch |
| https://github.com/apache/airflow/pull/68528 | [email protected] | Issue TrackingPatch |
| https://lists.apache.org/thread/otvdw8qt2y7xy2n5nq9xby9ky4rf5ltj | [email protected] | Vendor AdvisoryMailing List |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-502 | Deserialization of Untrusted Data | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| apache airflow | < 3.3.0 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 8, 2026 | Initial Analysis | [email protected] |
| Jul 8, 2026 | CVE Modified | CISA-ADP |
| Jul 7, 2026 | CVE Modified | CISA-ADP |
| Jul 7, 2026 | CVE Modified | CVE |
| Jul 7, 2026 | New CVE Received | [email protected] |