Security Advisory

CVE-2026-63042

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-20 15:50:06
Last updated 2026-08-24 16:57:08
Assigner apache
CVSS score 8.1
State PUBLISHED

Description

Files or Directories Accessible to External Parties vulnerability in Apache InLong. Any user who can authenticate to the manager can create, modify and delete Data Node definitions. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are advised to upgrade to Apache InLong's 2.4.0 or cherry-pick [1] to solve it. [1]  https://github.com/apache/inlong/pull/12161 .