CVE-2026-25917

Affected versions of the apache-airflow-core package are vulnerable to Remote Code Execution due to unsafe deserialisation or evaluation of XCom payloads when rendered in the webserver context. A DAG Author who would not normally be able to execute code in the webserver process can craft an XCom payload that causes the webserver to execute arbitrary code when the payload is processed. A DAG Author can thereby achieve code execution within the webserver context, expanding the trust boundary beyond the intended DAG execution environment, though severity is rated Low because DAG Authors are already a highly trusted role.