VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 8, 2026· Updated Oct 8, 2026

CVE-2026-66087

CVE-2026-66087

Description

An authorization bypass vulnerability in Apache DolphinScheduler allows authenticated users to operate task instance in projects they are not authorized to access through the

  • /dolphinscheduler/projects/{projectCode}/task-instances/{taskInstanceId}/stop
  • /dolphinscheduler/projects/{projectCode}/task-instances/{taskInstanceId}/savepoint

This issue affects Apache DolphinScheduler: before 3.4.3.

Users are recommended to upgrade to version 3.4.3, which fixes the issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.