CVE-2026-49050

概要

参考情報

• lists.apache.org/thread/0lc4t5k6h6nhd8t4hshgjk6yp3cl8sb0 · Mailing List
• openwall.com/lists/oss-security/2026/06/17/6 · Mailing List

dolphinscheduler のその他の脆弱性

• CVE-2026-66083中 6.5The /datasources/unauth-datasource endpoint does not properly enforce data source authorization. An authenticated user can invoke this endpo…
• CVE-2026-47340中 6.5Allow authenticated users to access alert instances associated with alert groups they do not have permission to access. in Apache DolphinSch…
• CVE-2026-42357中 6.5Incorrect Authorization vulnerability allows users to access workflow instance information belonging to projects they do not have permission…
• CVE-2026-41280中 4.9Incorrect Authorization vulnerability allows users with system login privileges to delete task definitions in unauthorized projects This is…
• CVE-2026-32967緊急 9.1Incorrect Authorization vulnerability of `/v2` experimental interface in Apache DolphinScheduler. This issue affects Apache DolphinSchedule…