CYBERHAWK / CVE / CVE-2026-32966

CVE-2026-32966

CRITICAL CVSS 9.8 other

The flaw

DataSource API Missing Authorization Check Leads to Arbitrary Data Source Metadata Disclosure in Apache DolphinScheduler. This issue affects Apache DolphinScheduler: before 3.4.2. Users are recommended to upgrade to version 3.4.2, which f

What to do

Review advisory and patch per vendor guidance.

▸ Scan my repo for CVE-2026-32966

References

First seen 2026-06-19 · Tracked by PickBits CyberHawk · Weekly CVE digest