GHSA-2qjv-p2gc-mjg2

Suggest an improvement
Source
https://github.com/advisories/GHSA-2qjv-p2gc-mjg2
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/08/GHSA-2qjv-p2gc-mjg2/GHSA-2qjv-p2gc-mjg2.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-2qjv-p2gc-mjg2
Aliases
Downstream
Published
2026-08-12T18:31:18Z
Modified
2026-10-02T23:40:52Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
Apache Airflow Task SDK Callback deserialization can import arbitrary modules in the scheduler
Details

Apache Airflow's Task SDK rebuilt a Callback object from serialized data by re-running its constructor, which imports the module named by the stored callback path. Because SyncCallback is itself an Airflow class it passes the default allowed_deserialization_classes allow-list, so tightening that setting does not help. A Dag author — who controls a task instance's next_kwargs through the task execution API — can therefore cause an arbitrary module to be imported inside the scheduler process, when the scheduler's awaiting_input timeout sweep deserializes that value. No non-default configuration is required; the sweep runs unconditionally. Versions before 3.3.0 are not affected: the class existed, but the scheduler sweep that reaches it did not. This is a separate code path from CVE-2026-58076 and CVE-2026-67260, which cover different gadgets reaching deserialization — applying either of those fixes does not address this one. Users are advised to upgrade to apache-airflow 3.3.1 or later.

Database specific 
{
    "cwe_ids":  [
        "CWE-502"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2026-10-02T23:15:27Z",
    "nvd_published_at":  "2026-08-12T16:17:15Z",
    "severity":  "HIGH"
}
References

Affected packages

PyPI / apache-airflow

Package

Name
apache-airflow
View open source insights on deps.dev
Purl
pkg:pypi/apache-airflow

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.3.0
Fixed
3.3.1

Affected versions

3.*
3.3.0
3.3.1rc1
3.3.1rc2

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/08/GHSA-2qjv-p2gc-mjg2/GHSA-2qjv-p2gc-mjg2.json"