Apache DolphinScheduler versions prior to 3.2.2 contain an improper input validation vulnerability that allows an authenticated user to execute arbitrary shell scripts on the server via alert scripts. This vulnerability is addressed in version 3.2.2 and later.