Airflow RCEs, rsync 33-CVE release, kernel TAP DoS

Apache Airflow disclosed several DAG-author remote code execution paths on the Scheduler and API server, plus an authorization bypass and a secrets-masking gap. Separately, rsync 3.5.0 shipped fixes for 33 CVEs, and a Linux kernel TAP path remained open to guest-triggered host denial of service.

Apache Airflow RCE via BaseSerialization import_string

Apache Airflow disclosed CVE-2026-58076, where unguarded import_string() handling of airflow_exc_ser and base_exc_ser exception nodes in BaseSerialization.deserialize enables remote code execution by DAG authors on the Scheduler and API Server. The issue is reachable in normal serialization flows that process those exception nodes. Deployments that accept DAGs from less-trusted authors should treat this as a control-plane compromise path until patched.

rsync 3.5.0 released with fixes for 33 CVEs

The rsync project released version 3.5.0 containing fixes for 33 CVEs. Backports for 3.2.7 and 3.4.1 were also provided. Operators who rely on rsync for backups or distribution should plan upgrades across supported branches given the breadth of the fix set.

Apache Airflow RCE via Callback deserialization gadget

Apache Airflow disclosed CVE-2026-67587, a DAG-author remote code execution issue on the Scheduler through a Serde Callback deserialization gadget. The path is reachable during scheduler sweep. Together with related serialization flaws, it shows that untrusted DAG content can drive dangerous object graphs on the control plane.

Apache Airflow RCE via next_kwargs deserialization

CVE-2026-67260 covers DAG-author remote code execution on the Scheduler via unguarded awaiting_input next_kwargs deserialization. The issue was announced with Apache Airflow 3.3.0. Readers who isolate DAG authorship from scheduler trust boundaries will care because this bypasses that isolation through ordinary task state handling.

Linux kernel guest-to-host DoS via TAP

An incomplete prior CVE fix left the tap_get_user_xdp() path exposed, allowing a guest to trigger a host panic through virtio-net and tap. The report frames this as a guest-to-host denial of service rather than escape. Hosts that expose virtio-net TAP to untrusted guests remain at risk until the remaining path is closed.

Apache Airflow secrets masker misses var.json values

CVE-2026-59244 is a moderate flaw in which dict-valued var.json Variable values were not masked in the Rendered Templates UI. The fix is included in Apache Airflow 3.3.1. Secrets stored only in that Variable form could previously appear to users who can view rendered templates.

Apache Airflow Backfill API authorization bypass

CVE-2026-68968 describes an authorization bypass in the Backfill API caused by conflicting interpretations of the backfill id between FastAPI dependencies and routes. The inconsistency lets requests slip past intended access checks. Sites that expose backfill operations to broader authenticated populations should prioritize the vendor fix.

Apache Airflow arbitrary airflow.* instantiation via XCom deserialize

CVE-2026-59242 allows authenticated callers to instantiate arbitrary airflow.* classes on the API server through an unsafe XCom deserialize endpoint. Impact is bounded to the airflow package namespace but still permits unexpected object construction. API server operators should treat the endpoint as high risk until upgraded.