CVE-2026-111421 | Apache Airflow Execution API set_xcom input validation

November 9, 2026 Yanac

A vulnerability labeled as critical has been found in Apache Airflow. Affected is the function set_xcom of the component Execution API. Such manipulation leads to improper input validation.

This vulnerability is listed as CVE-2026-111421. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More