CVE-2026-96285 | Apache Airflow Scheduler next_kwargs deserialization

November 9, 2026 Yanac

A vulnerability has been found in Apache Airflow and classified as critical. This vulnerability affects unknown code of the component Scheduler. This manipulation of the argument next_kwargs causes deserialization.

This vulnerability is handled as CVE-2026-96285. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More