dolphinscheduler vulnerabilities

CVEs whose affected-version data names the dolphinscheduler package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-49050High· 8.8

General user can mint admin access tokens via /access-tokens This issue affects Apache DolphinScheduler: before 3.4.2. Users are recommended to upgrade to version 3.4.2, which fixes the issue.

General user can mint admin access tokens via /access-tokens This issue affects Apache DolphinScheduler: before 3.4.2. Users are recommended to upgrade to version 3.4.2, which fixes the issue.

▾ Twilightapache · dolphinschedulerEPSS 0.34%via NVD

dolphinscheduler vulnerabilities (CVEs) · VulnSea