A vulnerability classified as critical has been found in Apache Airflow. Affected is the function BaseSerialization.deserialize of the component Exception Deserialization. The manipulation leads to deserialization.

This vulnerability is listed as CVE-2026-58076. The attack may be initiated remotely. There is no available exploit.