What’s Vulnerable › Products

Apache Software Foundation Apache InLong vulnerabilities

42 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 14 published in the last 12 months.

Check whether your Apache Software Foundation Apache InLong version is affected

Latest Apache Software Foundation Apache InLong vulnerabilities

• CVE-2026-63046 — Apache InLong: Agent Installer — Command Injection to RCE via Default Credentials (CVSS 8.8)
• CVE-2026-63044 — Apache InLong: Authenticated SSRF via POST /api/node/testConnection (CVSS 5.4)
• CVE-2026-63043 — Apache InLong: Agent path traversal via unvalidated file source path (CVSS 7.5)
• CVE-2026-63042 — Apache InLong: Missing authorization on DataNode management endpoints (CVSS 8.1)
• CVE-2026-63040 — Apache InLong: Missing authorization in StreamSource forceDelete (CVSS 8.1)
• CVE-2026-63039 — Apache InLong: SQL Injection via Unvalidated MyBatis Dollar-Sign Interpolation in AuditAlertRuleService (CVSS 9.8)
• CVE-2026-63038 — Apache InLong: SQL Injection via String Concatenation Vulnerability Report (CVSS 9.8)
• CVE-2026-63037 — Apache InLong: Unauthenticated SQL injection in Manager OpenAPI audit alert rule list endpoint (CVSS 9.8)
• CVE-2026-63016 — Apache InLong: Ordinary users can create new packages (CVSS 5.3)
• CVE-2026-63015 — Apache InLong: Non-template responsible persons can view template information (CVSS 4.3)
• CVE-2025-27531 — Apache InLong: An arbitrary file read vulnerability for JDBC (CVSS 9.8)
• CVE-2025-27528 — Apache InLong: JDBC Vulnerability for Invisible Character Bypass Leading to Arbitrary File Read (CVSS 9.1)
• CVE-2025-27526 — Apache InLong: JDBC Vulnerability For URLEncode and backspace bypass (CVSS 6.5)
• CVE-2025-27522 — Apache InLong: JDBC Vulnerability during verification processing (CVSS 6.5)
• CVE-2024-36268 — Apache InLong TubeMQ Client: Remote Code Execution vulnerability (CVSS 9.8)
• CVE-2024-26579 — Apache Inlong JDBC Vulnerability (CVSS 9.8)
• CVE-2024-26580 — Apache InLong: Logged-in user could exploit an arbitrary file read vulnerability (CVSS 9.1)
• CVE-2023-51785 — Apache InLong: Arbitrary File Read Vulnerability in Apache InLong Manager (CVSS 7.5)
• CVE-2023-51784 — Apache InLong: Remote Code Execution vulnerability in Apache InLong Manager (CVSS 9.8)
• CVE-2023-46227 — Apache inlong has an Arbitrary File Read Vulnerability (CVSS 7.5)
• CVE-2023-43668 — Apache InLong: Jdbc Connection Security Bypass in InLong (CVSS 9.8)
• CVE-2023-43667 — Apache InLong: Log Injection in Global functions (CVSS 7.5)
• CVE-2023-43666 — Apache InLong: General user Unauthorized access User Management (CVSS 6.5)
• CVE-2023-35088 — Apache InLong: SQL injection in audit endpoint (CVSS 9.8)
• CVE-2023-34434 — Apache InLong: JDBC URL bypassing by allowLoadLocalInfileInPath param (CVSS 7.5)