Database/Control plane, storage & DevOps
Apache Airflow CeleryExecutor: forged callbacks from the Celery broker run arbitrary code on workers
Impact
CeleryExecutor workers ran ExecuteCallback workloads (used for deadline-alert callbacks) without validating the workload's authentication token. Anyone who can write to the Celery broker can enqueue a forged callback and run arbitrary code on every CeleryExecutor worker, with no Airflow credentials. Workers usually hold the connection credentials and network reach of every pipeline they run, so this gives an attacker those credentials and that network access across the fleet. The real exposure depends on how well the broker (Redis/RabbitMQ) is locked down.
Who can reach it
Anyone with write access to the Celery broker used by Airflow. No Airflow authentication is needed. Only deployments using the CeleryExecutor are affected.
What to do
Upgrade to apache-airflow 3.4.0 or later and restart the scheduler and all Celery workers. In 3.4.0 the worker claims the callback through the Execution API, which validates the token, before running it. Until then, make sure the broker requires authentication and only Airflow components can reach it.
References
Related entries
- Linux perf/x86/amd/core - Branch Sampling enabled from the SVM reload path: Branch Sampling and Last Branch RecordCVE-2026-72325 · Linux perf/x86/amd/core - Branch Sampling enabled from the SVM reload pathUnscored
- Linux kernel NFSv4 client: a delayed FREE_STATEID can use a freed nfs_serverCVE-2026-74730 · Linux kernel NFSv4 client (nfs_server lifetime across FREE_STATEID)Unscored
- Apache Airflow Task SDK: secret cache key collision exposes other teams' Variables and ConnectionsCVE-2026-76185 · Apache Airflow Task SDK (secret cache, multi-team mode)Unscored
- Apache Airflow: deadline alert fields let Dag authors construct allow-listed classes in the schedulerCVE-2026-82337 · Apache Airflow (deadline alert deserialization in scheduler and API server)Unscored
- Apache Airflow CLI: position-based masking leaves secrets in cleartext in the audit logCVE-2026-86468 · Apache Airflow CLI (audit log argument masking)Unscored
- Apache Airflow scheduler: task-written XCom values are fully deserialized in the scheduler processCVE-2026-86829 · Apache Airflow scheduler (XCom deserialization during dependency evaluation)Unscored
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.