CVE lookup

CVE-2026-33264

Pruva has a verified reproduction for CVE-2026-33264: Apache Airflow DAG author RCE via unrestricted import_string() in BaseSerialization.deserialize(). The canonical evidence record is REPRO-2026-00277.

REPRO

REPRO-2026-00277

Package

apache/airflow · github

Severity

CRITICAL

Status

published

Open verified reproduction Plain text for agents NVD source