Deployments are affected when DAG authors are treated as less trusted than Deployment Managers. The issue matters because task-controlled XCom data can be deserialized in the scheduler, crossing the intended boundary between worker-scoped DAG author capabilities and scheduler-side deployment management code.
A DAG author must control data written to XCom, and the scheduler must evaluate a task dependency that reads that task-written XCom value. The vulnerable behavior occurs during that dependency evaluation.
Apache Airflow versions before 3.4.0 are affected. Version 3.4.0 and later restrict dependency evaluation to primitive XCom values.
The provided information identifies the affected trust model and trigger condition but does not specify a workaround. Prioritize limiting DAG author access where those authors are less trusted than Deployment Managers, and upgrade to 3.4.0 or later when possible.