CLEANSTART-2026-ID11627: Security fix for CVE-2026-49264 applied in: airflow-3 3.3.2-r1

Q: Which package release contains the security fix?

The fix is applied in airflow-3 version 3.3.2-r1. The issue is resolved in later releases as well.

Q: What level of access does an attacker need?

The vector indicates the issue is remotely reachable and requires no privileges, but exploitation requires user interaction. Successful exploitation can affect confidentiality and integrity to a low degree, with no indicated availability impact.

Published Nov 3, 2026

Updated

Security vulnerability affects the airflow-3 package. This issue is resolved in later releases. See references for vulnerability details.

Affected Software

1 affected componentFixes available

cleanstart/airflow-3<3.3.2-r1

3.3.2-r1

Event History

Nov 3, 2026

Advisory Published

via OSV·12:42 AM

Data Sourced

via OSV·12:42 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-49264

Frequently Asked Questions

Which package release contains the security fix?

The fix is applied in airflow-3 version 3.3.2-r1. The issue is resolved in later releases as well.

What level of access does an attacker need?

The vector indicates the issue is remotely reachable and requires no privileges, but exploitation requires user interaction. Successful exploitation can affect confidentiality and integrity to a low degree, with no indicated availability impact.

CLEANSTART-2026-ID11627: Security fix for CVE-2026-49264 applied in: airflow-3 3.3.2-r1

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

Which package release contains the security fix?

What level of access does an attacker need?

Company

Resources

Contact

Frequently Asked Questions

Which package release contains the security fix?

What level of access does an attacker need?