CVE-2026-63043 — Apache InLong: Agent path traversal via unvalidated file source path

CVE-2026-63043

Apache InLong: Agent path traversal via unvalidated file source path PUBLISHED

Description (CNA)

Relative Path Traversal vulnerability in Apache InLong. Arbitrary file read from the Agent host filesystem. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are advised to upgrade to Apache InLong's 2.4.0 or cherry-pick [1] to solve it. [1] https://github.com/apache/inlong/pull/12146 .

Affected (CNA)

Vendor / product	Versions
Apache Software Foundation / Apache InLong	affected 2.0.0 before 2.4.0

CWE

CWE-23

References

https://lists.apache.org/thread/0ohn861tzd9g7nsosd6oz3of6dvhvqnk

ADP enrichment

CVE

No English description supplied.

http://www.openwall.com/lists/oss-security/2026/08/20/16

CISA-ADP

No English description supplied.

No references supplied.