Executive brief
Apache DolphinScheduler has an Incorrect Authorization Vulnerability
Affected products
- Maven org.apache.dolphinscheduler:dolphinscheduler
Junglewise Threat Intelligence
CVE-2026-23902: Apache DolphinScheduler has an Incorrect Authorization Vulnerability
CVE-2026-23902 · Severity: low · CVSS 3.1 · Published 2026-04-24
Technologies: org.apache.dolphinscheduler:dolphinscheduler (Maven). Vendors: Maven.
Related threats
- Apache DolphinScheduler RPC module has a Deserialization of Untrusted Data vulnerability
- Apache DolphinScheduler sensitive information disclosure in management endpoints
- Apache DolphinScheduler vulnerable to Alert Script Attack
- Apache DolphinScheduler Incorrect Default Permissions Vulnerability
- Apache DolphinScheduler: RCE by arbitrary js execution