PatchTheCVEinlong vulnerabilities and fixes
Recent CVEs affecting inlong, with upgrade or downgrade steps. 10 tracked.
inlong has 10 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 10. Most recent: 2026-08-21. Highest priority: CVE-2026-63037 (score 60/100).
- CVE-2026-63037 CRITICAL 9.8 UPGRADE Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache I
- CVE-2026-63038 CRITICAL 9.8 UPGRADE Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache I
- CVE-2026-63039 CRITICAL 9.8 UPGRADE Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache I
- CVE-2026-63043 HIGH 7.5 UPGRADE Relative Path Traversal vulnerability in Apache InLong. Arbitrary file read from the Agent host filesystem. T
- CVE-2026-63040 HIGH 8.1 UPGRADE Files or Directories Accessible to External Parties vulnerability in Apache InLong. StreamSource performs no a
- CVE-2026-63042 HIGH 8.1 UPGRADE Files or Directories Accessible to External Parties vulnerability in Apache InLong
- CVE-2026-63016 MEDIUM 5.3 UPGRADE Uncontrolled Resource Consumption vulnerability in Apache InLong
- CVE-2026-63044 MEDIUM 5.4 UPGRADE Server-Side Request Forgery (SSRF) vulnerability in Apache InLong. Any authenticated user (no admin role requ
- CVE-2026-63015 MEDIUM 4.3 UPGRADE Uncontrolled Resource Consumption vulnerability in Apache InLong. Non-template responsible persons can view te
- CVE-2026-63046 HIGH 8.8 UPGRADE Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Apache InL
FAQ
How do I fix inlong vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is inlong being exploited right now?
None of the tracked inlong CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which inlong CVE should I patch first?
CVE-2026-63037 currently ranks highest (60/100): Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache I.