ZoomEye finds 3,204 exposed DolphinScheduler interfaces

ZoomEye returned 3,204 matches for pages titled DolphinScheduler and 146,722 for the Apache DolphinScheduler app on October 28, 2026. Researchers advise checking authentication modes, tenants and long-lived API tokens rather than just whether the login page responds.

• Title query returned 3,204 matches; app query returned 146,722
• DolphinScheduler supports password, LDAP, Casdoor SSO and OAuth2
• Tenants and worker groups define where jobs run and under which identity
• Non-expiring tokens create a durable path around user login