CVE-2026-63042

Published: Ago 20, 2026 Last Modified: Ago 20, 2026
ExploitDB:
Other exploit source:
Google Dorks:

Description

AI Translation Available

Files or Directories Accessible to External Parties vulnerability in Apache InLong. Any user who can authenticate to the manager can create, modify and delete Data Node definitions.

This issue affects Apache InLong: from 2.0.0 before 2.4.0.

Users are advised to upgrade to Apache InLong's 2.4.0 or cherry-pick [1] to solve it.

[1]  https://github.com/apache/inlong/pull/12161 .

552

Files or Directories Accessible to External Parties

Draft
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Confidentiality Integrity
Potential Impacts:
Read Files Or Directories Modify Files Or Directories
Applicable Platforms
Technologies: Not Technology-Specific, Cloud Computing
View CWE Details
https://lists.apache.org/thread/wxs4jfjkoo6rlyovhrx8bo74rfm…
https://lists.apache.org/thread/wxs4jfjkoo6rlyovhrx8bo74rfmzwbk7