CVE-2025-54550 json
Apache Airflow: RCE by race condition in example_xcom dag
published 2026-04-15 6 mo ago modified 2026-11-03 5 d ago also BIT-airflow-2025-54550 , EUVD-2025-209465 , GHSA-q2hg-643c-gw8h , PYSEC-2026-2353
- cvss
- 8.1
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.6%
- EPSS 0.6% chance of exploitation in 30 days, percentile 47%
- public exploits
- 0
- none known
Summary
The example example_xcom that was included in airflow documentation implemented unsafe pattern of reading value from xcom in the way that could be exploited to allow UI user who had access to modify XComs to perform arbitrary execution of code on the worker. Since the UI users are already highly trusted, this is a Low severity vulnerability.
It does not affect Airflow release - example_dags are not supposed to be enabled in production environment, however users following the example could replicate the bad pattern. Documentation of Airflow 3.2.0 contains version of the example with improved resiliance for that case.
Users who followed that pattern are advised to adjust their implementations accordingly.
Patch / fix
- bitnami airflow 3.2.0
- pypi apache-airflow 3.2.0
- Apache Software Foundation Apache Airflow 3.0.0, 3.2.0
- github.com/apache/airflow#63200 pull request
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- total
- Assessed
- 6 mo ago
Exploit prediction
0.58% chance of exploitation in the next 30 days, higher than 47% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CISA ADP | 3.1 | 8.1 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N |
| CNA | 3.1 | 8.1 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N |
| OSV | 3.1 | 8.1 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| bitnami | airflow | <3.2.0 |
3.2.0 |
| pypi | apache-airflow | <3.2.0 |
3.2.0 |
Affected products
- Apache Software Foundation Apache Airflow
Classification
- Weakness
-
- CWE-94 Improper Control of Generation of Code
References
-
github.com
/apache/airflow/pull/63200
patch, issue-tracking, report, web
-
lists.apache.org
/thread/3mf4cfx070ofsnf9qy0s2v5gqb5sc2g1
vendor-advisory, mailing-list, advisory, web
-
openwall.com
/lists/oss-security/2026/04/15/1
mailing-list, third-party-advisory, advisory, web
-
nvd.nist.gov
/vuln/detail/CVE-2025-54550
web, advisory
-
github.com
/apache/airflow
package
-
pypi.org
/project/apache-airflow
package
-
github.com
/advisories/GHSA-q2hg-643c-gw8h
advisory
Sources
- CVE List CVE-2025-54550
- GitHub Advisory GHSA-q2hg-643c-gw8h
- NVD CVE-2025-54550
- OSV BIT-airflow-2025-54550
- OSV PYSEC-2026-2353
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.
CPEs and fixed versions use Anchore's correction of NVD's data: Added CPE configurations because not yet analyzed by NVD.