CVE-2022-45462: Apache Dolphinscheduler

Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days.

Alarm instance management has command injection when there is a specific command configured. It is only for logged-in users. We recommend you upgrade to version 2.0.6 or higher

Affected products

• Apache Dolphinscheduler: before 2.0.6 (fixed in 2.0.6)

Published 2022-11-23. Last modified 2026-06-17.