Sensitive Information Exposure in Apache DolphinScheduler by Apache

CVE-2025-62188

What is CVE-2025-62188?

A vulnerability in Apache DolphinScheduler allows unauthorized actors to potentially access sensitive information, including critical database credentials. This affects all versions within the 3.1.* series, making it essential for users to upgrade to version 3.2.0 or higher. For immediate mitigation, users can temporarily restrict access to management endpoints by setting specific environment variables or modifying their application configuration to limit exposure.

References