CVE-2026-33264Disclosure(apache / airflow)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch apache airflow systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A bug in `BaseSerialization.deserialize()` allowed unrestricted `import_string()` of attacker-controlled class paths when the Scheduler / API Server loaded a serialized DAG: a DAG author could embed a malicious trigger into a DAG to gain remote code execution on the API Server / Scheduler process, crossing the Airflow security boundary that DAG-author code must never execute in those processes. Users are advised to upgrade to `apache-airflow` 3.3.0 or later. As a defense-in-depth mitigation, deployments where DAG-author trust is limited can restrict the `[core] allowed_deserialization_classes` config to a narrow allowlist.

apache CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Patch / fix

Vendor / third-party advisories

Weakness type (CWE)

CWE-502

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

airflow

Threat summary

Patch or workaround signal is available
5 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 2 signals
Technical details provided in 4 signals
Disclosure: 2 classified signals
General: 1 classified signal
Peaked 1d ago at 4 mentions (2026-07-07); latest day: 1
5 total mentions across 2 days

Affected systems

Vendors

apache

Products

airflow

Deep dive

Activity timeline5 mentions / 2d

Signal classification3 categories

Disclosure

240.0%

Patch

240.0%

General

120.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-07-07	4	Disclosure2Patch2
2026-08-27	1	General1

Full discourse5 posts

BugBunny.ai - Continuous AI Pentesting System@BugBunny_ai41d
General
108 CVE-2025-58434 CVE-2025-59057 CVE-2025-59343 CVE-2025-59790 CVE-2025-59792 CVE-2025-61622 CVE-2025-61686 CVE-2025-62228 CVE-2025-62232 CVE-2025-64756 CVE-2026-21884 CVE-2026-22706 CVE-2026-22807 CVE-2026-23630 CVE-2026-24015 CVE-2026-24899 CVE-2026-27471 CVE-2026-27806 CVE-2026-27955 CVE-2026-28215 CVE-2026-28217 CVE-2026-28351 CVE-2026-28361 CVE-2026-28384 CVE-2026-28396 CVE-2026-28398 CVE-2026-28444 CVE-2026-28445 CVE-2026-29093 CVE-2026-30973 CVE-2026-31888 CVE-2026-33016 CVE-2026-33037 CVE-2026-33038 CVE-2026-33039 CVE-2026-33264 CVE-2026-33413 CVE-2026-3351 CVE-2026-34037 CVE-2026-34158 CVE-2026-34167 CVE-2026-34170 CVE-2026-34171 CVE-2026-34198 CVE-2026-34532 CVE-2026-34573 CVE-2026-34574 CVE-2026-34595 CVE-2026-34746 CVE-2026-34748 CVE-2026-34749 CVE-2026-34750 CVE-2026-34972 CVE-2026-35214 CVE-2026-35412 CVE-2026-35413 CVE-2026-35441 CVE-2026-40006 CVE-2026-40007 CVE-2026-40009 CVE-2026-40165 CVE-2026-40293 CVE-2026-40302 CVE-2026-40304 CVE-2026-40452 CVE-2026-40454 CVE-2026-40914 CVE-2026-41131 CVE-2026-41590 CVE-2026-42275 CVE-2026-42883 CVE-2026-42884 CVE-2026-42885 CVE-2026-42886 CVE-2026-43888 CVE-2026-43889 CVE-2026-43998 CVE-2026-43999 CVE-2026-44247 CVE-2026-44309 CVE-2026-44310 CVE-2026-44442 CVE-2026-44446 CVE-2026-44705 CVE-2026-44947 CVE-2026-45022 CVE-2026-45090 CVE-2026-45720 CVE-2026-45723 CVE-2026-45726 CVE-2026-46553 CVE-2026-46554 CVE-2026-47733 CVE-2026-4800 CVE-2026-48978 CVE-2026-49478 CVE-2026-50285 CVE-2026-52808 CVE-2026-52809 CVE-2026-53926 CVE-2026-53928 CVE-2026-53929 CVE-2026-53930 CVE-2026-56842 CVE-2026-60076 CVE-2026-60077 CVE-2026-75605 CVE-2026-9103
Post summary
The content simply enumerates a series of CVE identifiers without further context, indicators, or details.
30124138.4K
4.0K followersView on X
SecAlerts@SecAlertsCo91d
Patch
🌬️ Apache Airflow critical RCE: CVE-2026-33264 lets a DAG author execute code on the webserver via unrestricted import_string() in BaseSerialization.deserialize(). CVSS 9.8. Patch now. #Airflow #AppSec https://secalerts.co/vulnerability/CVE-2026-33264?utm_campaign=x https://t.co/d8YBcw0inN
Post summary
This tweet announces a critical Apache Airflow RCE (CVE-2026-33264) that lets DAG authors run arbitrary code with a CVSS 9.8 score, and urges users to apply the available patch.
00000108
852 followersView on X
Upwind Security MDR@UpwindMDR91d
Patch
🚨Critical - Apache Airflow DAG Deserialization RCE on Scheduler/API Server (CVE-2026-33264) A bug in Airflow's BaseSerialization.deserialize() allowed unrestricted import_string() of attacker-controlled class paths when the Scheduler / API Server loaded a serialized DAG. A DAG author could embed a malicious trigger into a DAG and gain remote code execution on the API Server / Scheduler process. That breaks a core Airflow security boundary: DAG-author code must never run in those trusted processes (only in workers). The CWE-502 flaw is rated CVSS 9.8 and CISA-assessed as automatable, with the practical risk scaling to how much you trust whoever can submit DAGs. 👉Upgrade to apache-airflow 3.3.0; optionally restrict [core] allowed_deserialization_classes to a narrow allowlist.
Post summary
This post discloses a critical RCE flaw in Apache Airflow’s DAG deserialization, provides technical details and CVSS rating, and advises users to upgrade or restrict deserialization classes to mitigate the risk.
0000085
243 followersView on X
Infoflowcloud@infoflowcloud91d
Disclosure
🚨*CVE* CVE-2026-33264 A bug in `BaseSerialization.deserialize()` allowed unrestricted `import_string()` of attacker-controlled class paths when the Scheduler / API Server loaded a serializ… https://www.cve.org/CVERecord?id=CVE-2026-33264 ----- Traducción: CVE-2026-33264 Un … http://infoflow.cloud`
Post summary
The post announces CVE‑2026‑33264, giving a brief technical description of the vulnerability but without any PoC, exploit code, patch, or evidence of active exploitation.
0000033
91 followersView on X
CVE@CVEnew91d
Disclosure
CVE-2026-33264 A bug in `BaseSerialization.deserialize()` allowed unrestricted `import_string()` of attacker-controlled class paths when the Scheduler / API Server loaded a serializ… https://www.cve.org/CVERecord?id=CVE-2026-33264
Post summary
The entry announces CVE-2026-33264, detailing an unrestricted import_string vulnerability in BaseSerialization.deserialize, but offers no PoC, exploit code, patch info, or evidence of active use.
00000800
57.8K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	apache	airflow	-	-	-

Explore more

Back to dashboard apache CVEs airflow vulnerabilities

What researchers are saying

CVE-2026-33264

Upwind Security MDR[verified]@UpwindMDRPatch

This post discloses a critical RCE flaw in Apache Airflow’s DAG deserialization, provides technical details and CVSS rating, and advises users to upgrade or restrict deserialization classes to mitigate the risk.

BugBunny.ai - Continuous AI Pentesting System@BugBunny_aiGeneral

The content simply enumerates a series of CVE identifiers without further context, indicators, or details.

SecAlerts@SecAlertsCoPatch

This tweet announces a critical Apache Airflow RCE (CVE-2026-33264) that lets DAG authors run arbitrary code with a CVSS 9.8 score, and urges users to apply the available patch.

Infoflowcloud@infoflowcloudDisclosure

The post announces CVE‑2026‑33264, giving a brief technical description of the vulnerability but without any PoC, exploit code, patch, or evidence of active exploitation.

CVE@CVEnewDisclosure

The entry announces CVE-2026-33264, detailing an unrestricted import_string vulnerability in BaseSerialization.deserialize, but offers no PoC, exploit code, patch info, or evidence of active use.