CVE-2026-33264 | Apache Airflow up to 3.2.x Trigger BaseSerialization.deserialize deserialization

July 7, 2026 Yanac

A vulnerability was found in Apache Airflow up to 3.2.x. It has been rated as critical. This vulnerability affects the function BaseSerialization.deserialize of the component Trigger Handler. This manipulation causes deserialization.

This vulnerability is handled as CVE-2026-33264. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More