CVE-2026-47340 — Apache DolphinScheduler: An incorrect authorization vulnerability allows authenticated users to access alert instance…

CVE-2026-47340

Apache DolphinScheduler: An incorrect authorization vulnerability allows authenticated users to access alert instances associated with alert groups they do not have permission to access. PUBLISHED

Description (CNA)

Allow authenticated users to access alert instances associated with alert groups they do not have permission to access. in Apache DolphinScheduler. This issue affects Apache DolphinScheduler: before 3.4.2. Users are recommended to upgrade to version 3.4.2, which fixes the issue.

Affected (CNA)

Vendor / product	Versions
Apache Software Foundation / Apache DolphinScheduler	affected 0 before 3.4.2

CWE

CWE-200

References

https://lists.apache.org/thread/gx6v1wjb6qg3fzksxomysspy2gw54ooc

ADP enrichment

CVE

No English description supplied.

http://www.openwall.com/lists/oss-security/2026/06/17/5

CISA-ADP

No English description supplied.

No references supplied.