CVE-2026-82804

Apache DolphinScheduler versions before 3.4.3 are vulnerable to command injection via the Alert Script plugin . The root cause is the insufficient neutralization of shell metacharacters when the scriptPath parameter is incorporated into a /bin/sh -c command. An authenticated user can exploit this...