Apache DolphinScheduler: An incorrect authorization vulnerability allows authenticated users to access alert instances associated with alert groups they do not have permission to access.

GHSA-694g-j8pj-cjj5 · CVE-2026-47340

Published Jun 17, 2026 · Modified Jun 18, 2026

Description

Allow authenticated users to access alert instances associated with alert groups they do not have permission to access. in Apache DolphinScheduler.

This issue affects Apache DolphinScheduler: before 3.4.2.

Users are recommended to upgrade to version 3.4.2, which fixes the issue.

Ready to move

Free, no credit card | First findings in minutes