Database/Control plane, storage & DevOps
Apache Airflow: crafted XCom payload executes code in the webserver context
Impact
A DAG author can craft an XCom payload that makes the Airflow webserver execute arbitrary code when it renders that value. Airflow's design treats the webserver as a boundary DAG authors are not supposed to cross, and this erases it: code that was meant to run only on workers lands in the component that holds the webserver's credentials and database connection. On a fleet where Airflow drives training and data pipelines, that is the scheduler's own host, not a GPU node. The Airflow project rates severity Low because DAG authors are already highly trusted; the exposure is real where DAG authoring is delegated more widely than webserver access.
Who can reach it
A user with DAG authoring rights - no webserver code execution privilege needed. Not reachable by an unauthenticated client.
What to do
Upgrade to Apache Airflow 3.2.0 and restart the webserver and scheduler. No GPU node work is involved. If the upgrade has to wait, treat DAG authoring as equivalent to webserver access and restrict who can commit DAGs to the deployment.
References
Related entries
- Apache Airflow: login redirect route can be crafted to send users to an attacker-controlled originCVE-2026-40961 · Apache Airflow webserver (login redirect route, is_safe_url bypass)High
- Dell OpenManage Enterprise: unauthenticated SSRF reaches services on the management networkCVE-2026-54794 · Dell OpenManage Enterprise (web interface)High
- Dell OpenManage Enterprise: privileged user can inject OS commands and run code on the applianceCVE-2026-54796 · Dell OpenManage Enterprise (OS command handling)High
- Ivanti Endpoint Manager Mobile: Improper input validationCVE-2026-6973 · Ivanti Endpoint Manager MobileHigh
- Dell OpenManage Enterprise: improper privilege management lets a privileged account escalate furtherCVE-2026-70421 · Dell OpenManage Enterprise (privilege management)High
- Pandora FMS: blind SQL injection through the module parameter of the Grafana datasource endpointCVE-2026-75786 · Pandora FMS (Grafana datasource endpoint, module parameter)High
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.