CVE-2026-32966

The CVE affects Apache DolphinScheduler prior to 3.4.2. A missing authorization check in the DataSource API allows exposure of arbitrary data source metadata to unauthenticated users, enabling potential disclosure of sensitive information. The issue’s root cause is insufficient access control on ...

CVE-2026-32966

creationtimestamp| type| source ---|---|--- 2026-06-17 02:08:00+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3moha5qb4tj2c 2026-06-17 20:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3moj64wrdex2s 2026-06-22 00:40:04+00:00| seen|...