https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T20:52:14.485478+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-292963 EUVD-2026-292963 2026-10-09T20:52:14.488629+00:00 EUVD-2026-292963 https://cve.radiocsirt.org/vuln/fkie_cve-2026-23902 fkie_cve-2026-23902 2026-10-09T20:52:14.488679+00:00

Incorrect Authorization vulnerability in Apache DolphinScheduler allows authenticated users with system login permissions to use tenants that are not defined on the platform during workflow execution.

This issue affects Apache DolphinScheduler versions prior to 3.4.1.

Users are recommended to upgrade to version 3.4.1, which fixes this issue.

 https://cve.radiocsirt.org/vuln/ghsa-72mv-wwvm-vgp5 GHSA-72mv-wwvm-vgp5 — Apache DolphinScheduler has an Incorrect Authorization Vulnerability 2026-10-09T20:52:14.488731+00:00

Affected: Maven: org.apache.dolphinscheduler:dolphinscheduler

Incorrect Authorization vulnerability in Apache DolphinScheduler allows authenticated users with system login permissions to use tenants that are not defined on the platform during workflow execution.

This issue affects Apache DolphinScheduler versions prior to 3.4.1.

Users are recommended to upgrade to version 3.4.1, which fixes this issue.