CVE-2026-41280

Incorrect Authorization vulnerability allows users with system login privileges to delete task definitions in unauthorized projects This issue affects Apache DolphinScheduler versions prior to 3.4.2. Users are recommended to upgrade to version 3.4.2, which fixes this issue...

CVE-2026-41280

Apache DolphinScheduler versions prior to 3.4.2 are vulnerable to an Incorrect Authorization issue in the delete task definitions module. The vulnerability stems from insufficient authorization checks, allowing users with valid system login privileges to delete task definitions in projects they a...