Critical severity9.8NVD Advisory· Published Sep 3, 2025· Updated Jun 17, 2026

CVE-2024-43166

Description

Incorrect Default Permissions vulnerability in Apache DolphinScheduler.

This issue affects Apache DolphinScheduler: before 3.2.2.

Users are recommended to upgrade to version 3.3.1, which fixes the issue.

LLM-synthesized narrative grounded in this CVE's description and references.

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
org.apache.dolphinscheduler:dolphinschedulerMaven	< 3.3.1	3.3.1

Apache/Dolphinscheduler2 versions
cpe:2.3:a:apache:dolphinscheduler:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:apache:dolphinscheduler:*:*:*:*:*:*:*:*range: <3.2.2
- (no CPE)range: 0
ghsa-coords
pkg:maven/org.apache.dolphinscheduler/dolphinscheduler
Range: < 3.3.1

No linked articles in our index yet.