Apache DolphinScheduler: non-admin users can read admin-managed kubeconfig credentials

Impact

Any authenticated DolphinScheduler user, including low-privilege ones, can retrieve the kubeconfig that an administrator registered for cluster-managed task execution. That file carries credentials usable directly against the Kubernetes API, outside DolphinScheduler's own permission model, so the workflow tool stops being the boundary. On a GPU fleet the registered kubeconfig is usually the one that can place pods on accelerator nodes: if it is bound to cluster-admin or a broadly scoped service account, the holder can read Secrets, schedule their own pods onto GPU nodes alongside other tenants' workloads, and persist in the cluster. The blast radius is exactly the RBAC granted to that service account, which in practice is rarely minimal.

Who can reach it

Any user with valid DolphinScheduler login credentials, no admin role needed, reachable over whatever network the DolphinScheduler API/UI is exposed on. Authentication is required.

What to do

Upgrade Apache DolphinScheduler to 3.4.3 (affected: 3.2.0 up to but not including 3.4.3) and restart the API server component. Because the credentials may already have been read, treat the exposed kubeconfig as compromised: rotate the service-account token or client certificate it embeds and re-register the cluster. Scope that service account down to the namespaces DolphinScheduler actually needs rather than cluster-admin. No node drain or reboot is involved.

References

Related entries

• Determined AI (master API, generic task kill/pause/unpause handlers): The generic task kill, pause and unpauseCVE-2026-75109 · Determined AI (master API, generic task kill/pause/unpause handlers)High
• Jenkins ThinBackup plugin: attacker redirects backups and pulls arbitrary controller files into themCVE-2026-84667 · Jenkins ThinBackup plugin (backup configuration writable via Stapler data binding)High
• Linux kernel nfsd: stale opcnt after compound release leaks adjacent slab memory through the RPC status netlink dumpCVE-2026-89691 · Linux kernel nfsd (nfsd4_release_compoundargs, RPC status netlink interface)High
• Linux kernel nfsd: dispatch error paths leave the status seqlock counter odd, exposing mutating compound stateCVE-2026-89705 · Linux kernel nfsd (nfsd_dispatch rq_status_counter seqlock protocol)High
• Harness: missing space-scoped access control lets any authenticated user read other spaces' infra provider configsCVE-2026-92750 · Harness (infrastructure provider read endpoint, /api/v1/infraproviders)High
• MinIO: unsigned x-amz-copy-source on a presigned PUT URL turns one-object write into a read of any objectCVE-2026-97731 · MinIO (SigV4 signed-header validation, extractSignedHeaders)High