CVE-2025-54550

The example example_xcom that was included in airflow documentation implemented unsafe pattern of reading value from xcom in the way that could be exploited to allow UI user who had access to modify XComs to perform arbitrary execution of code on the worker. Since the UI users are already highly trusted, this is a Low severity vulnerability. It does not affect Airflow release - example_dags are not supposed to be enabled in production environment, however users following the example could replicate the bad pattern. Documentation of Airflow 3.2.0 contains version of the example with improved resiliance for that case. Users who followed that pattern are advised to adjust their implementations accordingly.

• CWE-94

• https://github.com/apache/airflow/pull/63200Issue Tracking
• https://lists.apache.org/thread/3mf4cfx070ofsnf9qy0s2v5gqb5sc2g1Mailing List, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2026/04/15/1Mailing List, Third Party Advisory

Published

Apr 15, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-54545On affected platforms, a restricted user could break out of …7.8
• CVE-2025-54546On affected platforms, restricted users could use SSH port f…7.5
• CVE-2025-54547On affected platforms, if SSH session multiplexing was confi…5.3
• CVE-2025-54548On affected platforms, restricted users could view sensitive…4.3
• CVE-2025-54549Cryptographic validation of upgrade images could be circumve…5.9
• CVE-2025-5455An issue was found in the private API function qDecodeDataUr…8.4
• CVE-2025-54551Synapse Mobility 8.0, 8.0.1, 8.0.2, 8.1, and 8.1.1 contain a…5.3
• CVE-2025-54554tiaudit in Tera Insights tiCrypt before 2025-07-17 allows un…5.3
• CVE-2025-54558OpenAI Codex CLI before 0.9.0 auto-approves ripgrep (aka rg)…4.1
• CVE-2025-54559An issue was found in the Application Server of Desktop Aler…3.7
• CVE-2025-5456A buffer over-read vulnerability in Ivanti Connect Secure be…7.5
• CVE-2025-54560A Server-side Request Forgery vulnerability was found in the…3.8