CVE-2024-43166

CVE-2024-43166 is a critical Incorrect Default Permissions vulnerability affecting Apache DolphinScheduler versions prior to 3.2.2. This flaw allows an unauthenticated attacker to achieve complete compromise of confidentiality, integrity, and availability due to its network-based attack vector and low complexity. While there is no known active exploitation or public exploit code, the vulnerability has garnered significant community discussion, indicating potential interest from threat actors. Users are strongly advised to upgrade to version 3.3.1 immediately to mitigate this severe risk.