CVE-2026-86829 | Apache Airflow up to 3.3.x Scheduler deserialization

November 9, 2026 Yanac

A vulnerability described as critical has been identified in Apache Airflow up to 3.3.x. This issue affects some unknown processing of the component Scheduler. The manipulation results in deserialization.

This vulnerability is cataloged as CVE-2026-86829. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More