Airflow, GodotSteam, and Vim security disclosures

Multiple security reports landed on oss-security covering Apache Airflow, GodotSteam, and Vim. The Airflow issues dominate the day and mostly involve incomplete prior fixes around deserialization and authentication boundaries.

GodotSteam peer ID spoofing in multiplayer

GodotSteam versions 4.17 through 4.23.2 allow any multiplayer peer to claim the server peer ID. A CVE has been assigned for the flaw, which lets an attacker spoof server ID 1 and issue authoritative commands. Projects shipping Godot-based multiplayer titles that rely on this Steam integration need to treat the spoof as a full loss of server authority until patched.

Vim clientserver socket directory exposure

Vim before 9.2.1308 creates its clientserver sockets in an insecure directory. The medium-severity issue permits local socket hijacking on shared systems. Users who enable the clientserver feature should move to 9.2.1308 or later to close the local attack path.

Airflow Execution API XCom reserved-key bypass

CVE-2026-111421 reports that set_xcom in the Execution API still skips the reserved-key check. Task-written XComs can therefore instantiate airflow.* classes on the API server. This is an incomplete remediation of earlier deserialization problems and requires an updated Airflow release for any deployment that accepts task-controlled XCom data.

Airflow scheduler next_kwargs deserialization order

CVE-2026-96285 shows that resume data is deserialized before the dict check inside the scheduler. Constructors can still be invoked from attacker-controlled next_kwargs. Operators running the scheduler against untrusted task output remain exposed until the ordering fix is applied.

Airflow DeadlineAlert plugin-registration bypass

CVE-2026-82337 allows DeadlineAlert fields to bypass the plugin-registration gate for scheduler-side deserialization. The moderate issue is another incomplete prior fix. Scheduler hosts that process DeadlineAlert data from tasks should upgrade to restore the intended gate.

Airflow Task SDK SecretCache key collision

CVE-2026-76185 describes a non-injective team cache key in the Task SDK SecretCache. When multi_team and use_cache are both enabled, the collision permits cross-team secret disclosure. Multi-team Airflow deployments that cache secrets must disable the cache or apply the corrected keying.

Airflow CeleryExecutor unauthenticated callbacks

CVE-2026-68982 covers forged callback workloads that run on Celery workers without workload-token validation. The result is remote code execution on workers prior to Airflow 3.4.0. Any CeleryExecutor deployment that accepts external callbacks needs the token check introduced in 3.4.0.

Airflow scheduler XCom deserialization in dependency checks

CVE-2026-86829 reports that the scheduler deserializes task-controlled XCom values while evaluating dependencies. Untrusted XCom content can therefore execute during ordinary scheduling. Sites that store complex objects in XCom and rely on the scheduler for dependency resolution should treat the values as untrusted until patched.