Apache Inlong vulnerabilities

• apache inlong Apache InLong: Agent Installer — Command Injection to RCE via Default Credentials CVE-2026-63046 8.8 HighAugust 21, 2026
• apache inlong Apache InLong: Authenticated SSRF via POST /api/node/testConnection CVE-2026-63044 5.4 MediumAugust 20, 2026
• apache inlong Apache InLong: Agent path traversal via unvalidated file source path CVE-2026-63043 7.5 HighAugust 20, 2026
• apache inlong Apache InLong: Missing authorization on DataNode management endpoints CVE-2026-63042 8.1 HighAugust 20, 2026
• apache inlong Apache InLong: Missing authorization in StreamSource forceDelete CVE-2026-63040 8.1 HighAugust 20, 2026
• apache inlong Apache InLong: SQL Injection via Unvalidated MyBatis Dollar-Sign Interpolation in AuditAlertRuleService CVE-2026-63039 Public exploit 9.8 CriticalAugust 20, 2026
• apache inlong Apache InLong: SQL Injection via String Concatenation Vulnerability Report CVE-2026-63038 9.8 CriticalAugust 20, 2026
• apache inlong Apache InLong: Unauthenticated SQL injection in Manager OpenAPI audit alert rule list endpoint CVE-2026-63037 9.8 CriticalAugust 20, 2026
• apache inlong Apache InLong: Ordinary users can create new packages CVE-2026-63016 5.3 MediumAugust 20, 2026
• apache inlong Apache InLong: Non-template responsible persons can view template information CVE-2026-63015 4.3 MediumAugust 20, 2026
• apache inlong Apache InLong: An arbitrary file read vulnerability for JDBC CVE-2025-27531 Fix available 9.8 CriticalJune 6, 2025
• apache inlong Apache InLong: JDBC Vulnerability for Invisible Character Bypass Leading to Arbitrary File Read CVE-2025-27528 Fix available 9.1 CriticalMay 28, 2025
• apache inlong Apache InLong: JDBC Vulnerability For URLEncode and backspace bypass CVE-2025-27526 Fix available 6.5 MediumMay 28, 2025
• apache inlong Apache InLong: JDBC Vulnerability during verification processing CVE-2025-27522 Fix available 6.5 MediumMay 28, 2025
• apache inlong, apache software foundation inlong tubemq client +1 more Apache InLong TubeMQ Client: Remote Code Execution vulnerability CVE-2024-36268 Fix available 9.8 CriticalAugust 2, 2024
• apache inlong Apache Inlong JDBC Vulnerability CVE-2024-26579 Fix available 9.8 CriticalMay 8, 2024
• apache inlong Apache InLong: Logged-in user could exploit an arbitrary file read vulnerability CVE-2024-26580 Fix available 9.1 CriticalMarch 6, 2024
• apache inlong Apache InLong: Remote Code Execution vulnerability in Apache InLong Manager CVE-2023-51784 Fix available 9.8 CriticalJanuary 3, 2024
• apache inlong Apache InLong: Arbitrary File Read Vulnerability in Apache InLong Manager CVE-2023-51785 Fix available 7.5 HighJanuary 3, 2024
• apache inlong Apache inlong has an Arbitrary File Read Vulnerability CVE-2023-46227 Fix available 7.5 HighOctober 19, 2023
• apache inlong Apache InLong: General user Unauthorized access User Management CVE-2023-43666 Fix available 6.5 MediumOctober 16, 2023
• apache inlong Apache InLong: Log Injection in Global functions CVE-2023-43667 Fix available 7.5 HighOctober 16, 2023
• apache inlong Apache InLong: Jdbc Connection Security Bypass in InLong CVE-2023-43668 Fix available 9.8 CriticalOctober 16, 2023
• apache inlong Apache InLong: SQL injection in audit endpoint CVE-2023-35088 Fix available 9.8 CriticalJuly 25, 2023
• apache inlong Apache InLong: JDBC URL bypassing by allowLoadLocalInfileInPath param CVE-2023-34434 Fix available 7.5 HighJuly 25, 2023
• apache inlong Apache InLong: General user can delete and update process CVE-2023-34189 Fix available 6.5 MediumJuly 25, 2023
• apache inlong Apache InLong: Privilege escalation vulnerability for InLong CVE-2023-31062 Fix available 9.8 CriticalMay 22, 2023
• apache inlong Apache InLong: Insecurity direct object references cancelling applications CVE-2023-31064 Fix available 7.5 HighMay 22, 2023
• apache inlong Apache InLong: Insufficient Session Expiration in InLong CVE-2023-31065 Fix available 9.1 CriticalMay 22, 2023
• apache inlong Apache InLong: Insecure direct object references for inlong sources CVE-2023-31066 Fix available 9.1 CriticalMay 22, 2023
• apache inlong Apache InLong: Weak Password Implementation in InLong CVE-2023-31098 Fix available 9.8 CriticalMay 22, 2023
• apache inlong Apache InLong: Users who joined later can see the data of deleted users CVE-2023-31101 Fix available 6.5 MediumMay 22, 2023
• apache inlong Apache InLong: Attackers can change the immutable name and type of cluster CVE-2023-31103 Fix available 7.5 HighMay 22, 2023
• apache inlong Apache InLong: Attackers can change the immutable name and type of nodes CVE-2023-31206 Fix available 7.5 HighMay 22, 2023
• apache inlong Apache InLong: IDOR make users can delete others' subscription CVE-2023-31453 Fix available 7.5 HighMay 22, 2023
• apache inlong Apache InLong: IDOR make users can bind any cluster CVE-2023-31454 Fix available 7.5 HighMay 22, 2023
• apache inlong Apache InLong: JDBC URL bypassing by adding blanks CVE-2023-31058 Fix available 7.5 HighMay 22, 2023
• apache inlong Apache InLong: SQL injection in apache inLong 1.5.0 CVE-2023-30465 Fix available 5.3 MediumApril 11, 2023
• apache inlong Apache InLong: JDBC Deserialization Vulnerability in InLong CVE-2023-27296 Fix available 8.8 HighMarch 27, 2023
• apache inlong Apache InLong: Jdbc Connection Security Bypass CVE-2023-24997 9.8 CriticalFebruary 1, 2023
• apache inlong Apache InLong: Jdbc Connection causes arbitrary file reading in InLong CVE-2023-24977 7.5 HighFebruary 1, 2023
• apache inlong Deserialization attack in Apache InLong prior to version 1.3.0 allows RCE via JDBC CVE-2022-40955 Fix available 8.8 HighSeptember 20, 2022