https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T15:10:01.215921+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-62233 CVE-2025-62233 — Apache DolphinScheduler: Deserialization of untrusted data in RPC 2026-10-17T15:10:01.217454+00:00

Affected: Apache Software Foundation Apache DolphinScheduler

Deserialization of Untrusted Data vulnerability in Apache DolphinScheduler RPC module.

This issue affects Apache DolphinScheduler:

Version >= 3.2.0 and < 3.3.1.

Attackers who can access the Master or Worker nodes can compromise the system by creating a StandardRpcRequest, injecting a malicious class type into it, and sending RPC requests to the DolphinScheduler Master/Worker nodes. Users are recommended to upgrade to version [3.3.1], which fixes the issue.