Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-43166 EUVD-2024-54957GHSA-rrpj-r8h7-rm7r

Apache DolphinScheduler Incorrect Default Permissions Vulnerability

Published Sep 3, 2025 · Updated Nov 4, 2025 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache DolphinScheduler Package: org.apache.dolphinscheduler:dolphinscheduler Ecosystem: Maven

Description

Incorrect Default Permissions vulnerability in Apache DolphinScheduler.

This issue affects Apache DolphinScheduler: before 3.2.2.

Users are recommended to upgrade to version 3.3.1, which fixes the issue.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache DolphinScheduler < 3.2.2 3.2.2

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.apache.dolphinscheduler:dolphinscheduler < 3.3.1 3.3.1 GHSA-rrpj-r8h7-rm7r

References