CVE-2026-57590 Apache DolphinScheduler: Missing Authorization in Task Group APIs Allows Unauthorized Cross-Project Operations

A missing authorization vulnerability exists in the Task Group APIs of Apache DolphinScheduler. The affected APIs do not properly verify whether the authenticated user has permission to access the project associated with the target Task Group. This issue affects Apache DolphinScheduler: before...

CVE-2026-57590

A missing authorization vulnerability exists in the Task Group APIs of Apache DolphinScheduler (versions before 3.4.3 ). The root cause is that the affected APIs fail to verify if an authenticated user has the necessary permissions to access the project associated with the target Task Group. This...

CVE-2026-57590 Apache DolphinScheduler: Missing Authorization in Task Group APIs Allows Unauthorized Cross-Project Operations

A missing authorization vulnerability exists in the Task Group APIs of Apache DolphinScheduler. The affected APIs do not properly verify whether the authenticated user has permission to access the project associated with the target Task Group. This issue affects Apache DolphinScheduler: before...

PT-2026-97777

Name of the Vulnerable Software and Affected Versions Apache DolphinScheduler versions prior to 3.4.3 Description A missing authorization issue exists in the Task Group APIs. The affected APIs fail to properly verify if an authenticated user possesses the necessary permissions to access the proje...