PT-2026-81253 · Apache · Dolphinscheduler

CVE-2026-49050

Published

2026-08-25

Updated

2026-08-26

CVSS v3.1

8.8

High

Vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Apache DolphinScheduler versions prior to 3.4.2

Description A general user can mint admin access tokens through the '/access-tokens' endpoint.

Recommendations Upgrade to version 3.4.2.

Exploit

Fix

Incorrect Authorization

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2026-49050

Dolphinscheduler