Executive brief
Apache DolphinScheduler RPC module has a Deserialization of Untrusted Data vulnerability
Affected products
- Maven org.apache.dolphinscheduler:dolphinscheduler-rpc
- Maven org.apache.dolphinscheduler:dolphinscheduler
Junglewise Threat Intelligence
CVE-2025-62233: Apache DolphinScheduler RPC module has a Deserialization of Untrusted Data vulnerability
CVE-2025-62233 · Severity: low · CVSS 3.1 · Published 2026-04-24
Technologies: org.apache.dolphinscheduler:dolphinscheduler (Maven). Vendors: Maven.
Related threats
- Apache DolphinScheduler has an Incorrect Authorization Vulnerability
- Apache DolphinScheduler sensitive information disclosure in management endpoints
- Apache DolphinScheduler vulnerable to Alert Script Attack
- Apache DolphinScheduler Incorrect Default Permissions Vulnerability
- Apache DolphinScheduler: RCE by arbitrary js execution