Incorrect Authorization Vulnerability in Apache DolphinScheduler

CVE-2026-42357

What is CVE-2026-42357?

An Incorrect Authorization vulnerability exists in Apache DolphinScheduler, which enables unauthorized users to access sensitive workflow instance information linked to projects outside their permission scope. This flaw can lead to exposure of confidential project data, posing significant risks for organizations using the affected versions of the software. It is crucial for users to upgrade to Apache DolphinScheduler version 3.4.2 to mitigate this security risk.

References