# CVE-2025-62233

> Vulnerability · severity: **MEDIUM** (CVSS 6.3).

## Description

Deserialization of Untrusted Data vulnerability in Apache DolphinScheduler RPC module.

This issue affects Apache DolphinScheduler: 

Version >= 3.2.0 and < 3.3.1.

Attackers who can access the Master or Worker nodes can compromise the system by creating a StandardRpcRequest, injecting a malicious class type into it, and sending RPC requests to the DolphinScheduler Master/Worker nodes.
Users are recommended to upgrade to version [3.3.1], which fixes the issue.

## Key facts

- **CVE ID:** CVE-2025-62233
- **Published:** 2026-04-24
- **CVSS severity:** MEDIUM
- **CVSS base score:** 6.3
- **CWE codes:** CWE-502

## Affected products

- `apache:dolphinscheduler`

## Primary sources

- NIST NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-62233

## Citation

> AI Analytics. CVE-2025-62233. Retrieved 2026-08-13 from https://api.ai-analytics.org/cve/CVE-2025-62233. Derived from NIST NVD. Licensed CC0.

---

*[Dataset catalog](https://api.ai-analytics.org/datasets/) · [AI Analytics](https://api.ai-analytics.org/) · CC0 1.0*