CVE-2026-66087
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
08/10/2026
Última modificación:
08/10/2026
Descripción
*** Pendiente de traducción *** An authorization bypass vulnerability in Apache DolphinScheduler allows authenticated users to operate task instance in projects they are not authorized to access through the <br />
<br />
<br />
<br />
<br />
<br />
* /dolphinscheduler/projects/{projectCode}/task-instances/{taskInstanceId}/stop<br />
* /dolphinscheduler/projects/{projectCode}/task-instances/{taskInstanceId}/savepoint<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
This issue affects Apache DolphinScheduler: before 3.4.3.<br />
<br />
<br />
<br />
Users are recommended to upgrade to version 3.4.3, which fixes the issue.