CVE-2026-71183

Name of the Vulnerable Software and Affected Versions Apache DolphinScheduler versions prior to 3.4.3

Description An authorization flaw allows authenticated users to retrieve information about data sources they are not permitted to access. The issue occurs because the '/unauth-datasource' and '/authed-datasource' endpoints do not properly enforce access controls, leading to the disclosure of sensitive connection details and passwords. This could enable unauthorized access to the underlying databases.

Recommendations Upgrade to version 3.4.3.