{"id":"CVE-2026-66087","published":"2026-10-08T09:16:41.910","lastModified":"2026-10-08T21:18:02.143","description":"An authorization bypass vulnerability in Apache DolphinScheduler allows authenticated users to operate task instance in projects they are not authorized to access through the \n\n\n\n\n\n  *  /dolphinscheduler/projects/{projectCode}/task-instances/{taskInstanceId}/stop\n  *  /dolphinscheduler/projects/{projectCode}/task-instances/{taskInstanceId}/savepoint\n\n\n\n\n\n\n\n\nThis issue affects Apache DolphinScheduler: before 3.4.3.\n\n\n\nUsers are recommended to upgrade to version 3.4.3, which fixes the issue.","cvssScore":8.1,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","cwes":["CWE-863"],"vendors":[],"products":[],"references":[{"url":"https://lists.apache.org/thread.html/pghhb42sbyv5dhx6clcj4hllxnh7c0dn","tags":[]},{"url":"http://www.openwall.com/lists/oss-security/2026/10/08/3","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"Apache DolphinScheduler contains an authorization bypass vulnerability that allows authenticated users to stop or create savepoints for task instances in projects they don't have access to. This flaw enables unauthorized operations on critical workflow components, potentially leading to data corruption or process disruption.","exploitability":"The exploit is relatively straightforward as it requires only authenticated access and knowledge of target project codes and task instance IDs; no special privileges or complex conditions are needed beyond basic user authentication.","blast_radius":"If exploited, this vulnerability could allow attackers to halt critical workflows or create unintended savepoints in projects they shouldn't control, potentially causing operational disruptions across multiple teams' workflows.","remediation":"Upgrade to Apache DolphinScheduler 3.4.3 which fixes the authorization bypass issue.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["authorization-bypass","workflow","apache","orchestration","task-management"],"model":"garnet-coder","analyzedAt":"2026-10-16T09:20:40.209Z"}}