GHSA-q4c3-7575-55j2

Suggest an improvement
Source
https://github.com/advisories/GHSA-q4c3-7575-55j2
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/08/GHSA-q4c3-7575-55j2/GHSA-q4c3-7575-55j2.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-q4c3-7575-55j2
Aliases
Downstream
Published
2026-08-12T18:31:18Z
Modified
2026-10-02T23:41:04Z
Severity
  • 7.3 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L CVSS Calculator
Summary
Apache Airflow scheduler unsafely deserializes human-in-the-loop task next_kwargs
Details

Apache Airflow 3.3.0 moved human-in-the-loop tasks from the triggerer to a new awaiting_input task state swept by the scheduler. That sweep deserializes the task instance's next_kwargs without an allow-list, so a Dag author — who controls that value through the task execution API — can cause an arbitrary module import and object instantiation inside the scheduler process, or terminate the scheduler job. No non-default configuration is required: the sweep runs unconditionally every 15 seconds, and the default allowed_deserialization_classes setting does not cover this code path. Versions before 3.3.0 are not affected, because human-in-the-loop tasks deferred onto the triggerer instead. This is a different code path from CVE-2026-58076, which covers the same unguarded exception-node deserialization reached elsewhere — deployments that applied that fix must upgrade for this issue as well. Users are advised to upgrade to apache-airflow 3.3.1 or later.

Database specific 
{
    "cwe_ids":  [
        "CWE-502"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2026-10-02T23:15:49Z",
    "nvd_published_at":  "2026-08-12T16:17:14Z",
    "severity":  "HIGH"
}
References

Affected packages

PyPI / apache-airflow

Package

Name
apache-airflow
View open source insights on deps.dev
Purl
pkg:pypi/apache-airflow

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.3.0
Fixed
3.3.1

Affected versions

3.*
3.3.0
3.3.1rc1
3.3.1rc2

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/08/GHSA-q4c3-7575-55j2/GHSA-q4c3-7575-55j2.json"