CVE-2026-63043

CVE-2026-63043 is a Relative Path Traversal vulnerability in Apache InLong 's Agent component, caused by an unvalidated file source path . An unauthenticated attacker over the network can exploit this to perform arbitrary file read from the Agent host filesystem, resulting in high confidentiality...

EUVD-2026-63400

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache InLong. This allows an attacker to inject the string value into the SQL statement, enabling SQL injection. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are advised to...

CVE-2026-63038

CVE-2026-63038 is a CRITICAL (CVSS 9.8) SQL injection vulnerability in Apache InLong versions 2.0.0 through before 2.4.0 . The root cause is string concatenation in SQL command construction, allowing an unauthenticated, remote attacker to inject arbitrary SQL code through the dbName, tableName, s...