CVE-2026-49050 | Apache DolphinScheduler up to 3.4.1 Access Token /access-tokens privilege escalation

A vulnerability has been found in Apache DolphinScheduler up to 3.4.1 and classified as critical. Impacted is an unknown function of the file /access-tokens of the component Access Token Handler. Performing a manipulation results in privilege escalation.

This vulnerability is identified as CVE-2026-49050. The attack can be initiated remotely. There is not any exploit available.

The affected component should be upgraded.