Report: - Apache DolphinScheduler: Deserialization of untrusted data in RPC CVE-2025-62233

Report: - Apache DolphinScheduler: Deserialization of untrusted data in RPC CVE-2025-62233

CVE ID :CVE-2025-62233 Published : April 24, 2026, 11:16 a.m. | 36 minutes ago Description :Deserialization of Untrusted Data vulnerability in Apache DolphinScheduler RPC module. This issue affects Apache DolphinScheduler:  Version >= 3.2.0 and < 3.3.1. Attackers who can access the Master or Worker nodes can compromise the system by creating a StandardRpcRequest, injecting a malicious class type into it, and sending RPC requests to the DolphinScheduler Master/Worker nodes. Users are recommended to upgrade to version [3.3.1], which fixes the issue. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Published
April 24, 2026
Affected Product: Apache