Apache Airflow's XCom `GET /api/v2/{...}/xcomEntries/{key}?deserialize=true` endpoint passed a string-literal payload through `BaseXCom.deserialize_value` without the `_check_forbidden_xcom_keys` guard, allowing an authenticated API user with XCom write-and-read access to instantiate arbitrary `airflow.*` classes on the API server (CWE-502). An authenticated user who can write an XCom value and then read it back with `deserialize=true` triggers the unsafe instantiation. Users are advised to upgrade to apache-airflow 3.3.1 or later, which rejects reserved XCom serialization keys submitted as JSON string literals.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Apache Airflow's XCom `GET /api/v2/{...}/xcomEntries/{key}?deserialize=true` endpoint passed a string-
    literal payload through `BaseXCom.deserialize_value` without the `_check_forbidden_xcom_keys` guard,
    allowing an authenticated API user with XCom write-and-read access to instantiate arbitrary `airflow.*`
    classes on the API server (CWE-502). An authenticated user who can write an XCom value and then read it
    back with `deserialize=true` triggers the unsafe instantiation. Users are advised to upgrade to apache-
    airflow 3.3.1 or later, which rejects reserved XCom serialization keys submitted as JSON string literals.
    (CVE-2026-59242)

ID	Name	Product	Family	Type	Severity
472827	Echo: apache-airflow: security update to 3.3.1	Tenable Cloud Security	Echo Local Security Checks	Local	medium
472827	Echo: apache-airflow: security update to 3.3.1	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
472142	SCA: security update for apache-airflow (GHSA-fcmm-42r9-mmmm)	Tenable Cloud Security	SCA Checks	Local	medium
472142	SCA: security update for apache-airflow (GHSA-fcmm-42r9-mmmm)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium

Detections

Analytics

CVE-2026-59242

medium

Tenable Plugins

medium

medium

medium

medium