CVE-2026-63043: Apache Inlong

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

Relative Path Traversal vulnerability in Apache InLong. Arbitrary file read from the Agent host filesystem. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are advised to upgrade to Apache InLong's 2.4.0 or cherry-pick [1] to solve it. [1]  https://github.com/apache/inlong/pull/12146 .

Affected products

• Apache Inlong: from 2.0.0, before 2.4.0 (fixed in 2.4.0)

Published 2026-08-20. Last modified 2026-08-27.