| CVE-2026-71896 |
An authorization vulnerability in Apache DolphinScheduler allows authenticated users to retrieve other users' account…
|
Not rated
|
Oct 8, 2026 |
| CVE-2026-71895 |
An authorization vulnerability in Apache DolphinScheduler allows authenticated non-admin users to retrieve Kubernetes…
|
Not rated
|
Oct 8, 2026 |
| CVE-2026-71183 |
An authorization vulnerability in Apache DolphinScheduler allows authenticated users to obtain information about data…
|
Not rated
|
Oct 8, 2026 |
| CVE-2026-66087 |
An authorization bypass vulnerability in Apache DolphinScheduler allows authenticated users to operate task instance…
|
Not rated
|
Oct 8, 2026 |
| CVE-2026-66084 |
An authorization bypass vulnerability in Apache DolphinScheduler allows authenticated users to modify task definitions…
|
Not rated
|
Oct 8, 2026 |
| CVE-2026-66082 |
An authorization bypass vulnerability in Apache DolphinScheduler allows authenticated users to perform unauthorized…
|
Not rated
|
Oct 8, 2026 |
| CVE-2026-71897 |
An improper authorization check in Apache DolphinScheduler allows an authenticated user to use the batch-copy and…
|
Not rated
|
Sep 29, 2026 |
| CVE-2026-71898 |
An incorrect authorization check in Apache DolphinScheduler allows an authenticated user with only read permission for a…
|
Not rated
|
Sep 29, 2026 |
| CVE-2026-71899 |
A missing authorization vulnerability exists in the `query-dynamic-sub-workflows` API of Apache DolphinScheduler
|
Not rated
|
Sep 29, 2026 |
| CVE-2026-78214 |
An authentication bypass vulnerability exists in the protection of Actuator endpoints
|
Not rated
|
Sep 29, 2026 |
| CVE-2026-81569 |
An improper authorization vulnerability exists in the handling of sub-workflow tasks
|
Not rated
|
Sep 29, 2026 |
| CVE-2026-82804 |
The scriptPath parameter is incorporated into a /bin/sh -c command without sufficient neutralization of shell…
|
Not rated
|
Sep 29, 2026 |
| CVE-2026-66083 |
The /datasources/unauth-datasource endpoint does not properly enforce data source authorization
|
Not rated
|
Sep 29, 2026 |
| CVE-2026-57590 |
A missing authorization vulnerability exists in the Task Group APIs of Apache DolphinScheduler
|
Not rated
|
Sep 24, 2026 |
| CVE-2026-49050 |
General user can mint admin access tokens via /access-tokens
This issue affects Apache DolphinScheduler: before 3.4.2
|
Not rated
|
Aug 25, 2026 |
| CVE-2026-47340 |
Allow authenticated users to access alert instances associated with alert groups they do not have permission to access
|
Not rated
|
Jun 17, 2026 |
| CVE-2026-32967 |
Incorrect Authorization vulnerability of `/v2` experimental interface in Apache DolphinScheduler
|
Not rated
|
Jun 17, 2026 |
| CVE-2026-42357 |
Incorrect Authorization vulnerability allows users to access workflow instance information belonging to projects they do…
|
Not rated
|
Jun 17, 2026 |
| CVE-2026-41280 |
Incorrect Authorization vulnerability allows users with system login privileges to delete task definitions in…
|
Not rated
|
Jun 17, 2026 |
| CVE-2026-32966 |
DataSource API Missing Authorization Check Leads to Arbitrary Data Source Metadata Disclosure in Apache DolphinScheduler
|
Not rated
|
Jun 17, 2026 |
| CVE-2026-23902 |
Incorrect Authorization vulnerability in Apache DolphinScheduler allows authenticated users with system login…
|
Not rated
|
Apr 24, 2026 |
| CVE-2025-62233 |
Deserialization of Untrusted Data vulnerability in Apache DolphinScheduler RPC module
|
Not rated
|
Apr 24, 2026 |
| CVE-2025-62188 |
An Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Apache DolphinScheduler
|
Not rated
|
Apr 9, 2026 |
| CVE-2024-43166 |
Incorrect Default Permissions vulnerability in Apache DolphinScheduler
|
Not rated
|
Sep 3, 2025 |
| CVE-2024-43115 |
Improper Input Validation vulnerability in Apache DolphinScheduler
|
Not rated
|
Sep 3, 2025 |