CVE-2026-33264

A bug in `BaseSerialization.deserialize()` allowed unrestricted `import_string()` of attacker-controlled class paths when the Scheduler / API Server loaded a serialized DAG: a DAG author could embed a malicious trigger into a DAG to gain remote code execution on the API Server / Scheduler process, crossing the Airflow security boundary that DAG-author code must never execute in those processes. Users are advised to upgrade to `apache-airflow` 3.3.0 or later. As a defense-in-depth mitigation, deployments where DAG-author trust is limited can restrict the `[core] allowed_deserialization_classes` config to a narrow allowlist.

• CWE-502

• https://github.com/apache/airflow/pull/66002Issue Tracking, Patch
• https://github.com/apache/airflow/pull/68528Issue Tracking, Patch
• https://lists.apache.org/thread/otvdw8qt2y7xy2n5nq9xby9ky4rf5ltjVendor Advisory, Mailing List
• http://www.openwall.com/lists/oss-security/2026/07/07/1Third Party Advisory, Mailing List

Published

Jul 7, 2026

Last Modified

Jul 8, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-33258By publishing and querying a crafted zone an attacker can ca…7.5
• CVE-2026-33259Having many concurrent transfers of the same RPZ can lead to…5
• CVE-2026-3326The Xstore WordPress theme before 9.7.3 does not properly sa…8.6
• CVE-2026-33260An attacker can send a web request that causes unlimited mem…7.5
• CVE-2026-33261A zone transition from NSEC to NSEC3 might trigger an intern…5.9
• CVE-2026-33262An attacker can send replies that result in a null pointer d…5.9
• CVE-2026-33265In LibreChat 0.8.1-rc2, a logged-in user obtains a JWT for b…9
• CVE-2026-33266Use of Hard-coded Cryptographic Key vulnerability in Apache …7.5
• CVE-2026-33267Improper Input Validation vulnerability in Apache Traffic Se…9.1
• CVE-2026-33268Nanoleaf Lines 12.3.2 does not authenticate firmware file up…6.9
• CVE-2026-3327Authenticated Iframe Injection in Dato CMS Web Previews plug…4.8
• CVE-2026-33271Local privilege escalation due to insecure folder permission…6.7