CVE-2026-23902 in DolphinSchedulerinformation

Résumé

par MITRE • 24/04/2026

Incorrect Authorization vulnerability in Apache DolphinScheduler allows authenticated users with system login permissions to use tenants that are not defined on the platform during workflow execution.

This issue affects Apache DolphinScheduler versions prior to 3.4.1.

Users are recommended to upgrade to version 3.4.1, which fixes this issue.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Divulgation

24/04/2026

Modérer

accepté

Entrée

VDB-359321

CPE

prêt

CWE

CWE-841 (confirmé)

CVSS

4.7 (VulDB)

EPSS

0.00023

KEV

non

Activités

très faible

Sources

MITRE	https://www.cve.org/CVERecord?id=CVE-2026-23902
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-23902
CVE Details	https://www.cvedetails.com/cve/CVE-2026-23902/

◂ Précédent Aperçu Suivant ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!