Vulnerability · high · CVSS 7.3
Apache Airflow scheduler deserializes next_kwargs before dict check (CVE-2026-96285)
Tier B · Patch this week – Put it in the sprint
Who’s exposed: Apache Airflow 3.3.x scheduler deployments before 3.4.0
Tier B because: Core infrastructure or popular tool AND remote, no login
Reach
Attack
Damage
Fix
Popular tool · Remote, no login
What to do
- Upgrade Apache Airflow to 3.4.0 or later
The Brief
- CVE-2026-96285 affects Apache Airflow 3.3.0 before 3.4.0 and is rated moderate by the source.
- Airflow 3.3.1 added a check that the scheduler's decoded next_kwargs is a dictionary, but the check runs only after deserialization.
- Resume data can therefore still invoke constructors, which the earlier fix for CVE-2026-67260 was meant to prevent.
Why it matters
Teams running Airflow 3.3.x may believe the CVE-2026-67260 fix covers them, but scheduler resume data can still trigger constructor calls before the dictionary check runs.
The checklist behind the tier
Checklist · 3 of 10 yes
| Yes | Hits tech teams | Judgment: Apache Airflow is a workflow orchestrator that data and ops teams build with and run. |
| No | Core infrastructure | Judgment: Airflow is a single widely used framework, not core infrastructure like OpenSSH or the Linux kernel. |
| Yes | Popular tool | Judgment: Apache Airflow is a widely used mainstream data orchestration platform. |
| No | Exploited in the wild | oss-sec advisory describes a flaw and check bypass; no source reports observed attacks. |
| No | Public exploit | oss-sec advisory gives a description only; no source says exploit code or PoC is published. |
| Yes | Remote, no login | CVSSCVE-2026-67260: CVSS 7.3 – network, no privileges, no user interaction |
| No | Full takeover | oss-sec advisory says resume data still invokes constructors but does not state code execution or admin takeover. |
| No | Secrets exposed | oss-sec advisory reports no stolen or exposed credentials, configs or data. |
| No | Supply chain | oss-sec advisory describes a deserialization flaw; no compromised package, update or pipeline is reported. |
| No | No fix yet | GitHub AdvisoryGitHub Advisory: apache-airflow fixed in 3.3.1 |
The official record
From CVE.org, CISA’s Known Exploited Vulnerabilities catalog, FIRST EPSS and the GitHub Advisory Database. Where these answer a checklist fact, they win over the reporting.
- Exploited
- Not in CISA’s exploited catalog
CVE-2026-67260 ↗CVSS 7.3 high AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Apache Airflow: DAG-author remote code execution on the Scheduler via awaiting_input next_kwargs deserialization
- Exploited
- Not in CISA’s exploited catalog
- EPSS
- <1% chance of exploitation in the next 30 days · higher than 56% of all CVEs
- Fix
- apache-airflow (pip) fixed in 3.3.1
- Weakness
- CWE-502
Timeline
Vulnerability disclosed on the oss-security mailing list
Open Source Security
CVE-2026-96285: Apache Airflow: Scheduler: next_kwargs deserialized before the dict check, so resume data still invokes constructors
Source
CVE-2026-96285: Apache Airflow: Scheduler: next_kwargs deserialized before the dict check, so resume data still invokes constructors ↗ Open Source Security · 3h ago
First seen · 1 source · Full story page · How tiers are decided