CVE-2025-27531

Name of the Vulnerable Software and Affected Versions Apache InLong versions 1.13.0 through 2.1.0

Description The issue concerns a deserialization of untrusted data, allowing for an arbitrary file read vulnerability. This can be exploited by bypassing security measures through double writing of a parameter.

Recommendations For Apache InLong versions 1.13.0 through 2.1.0, consider restricting access to untrusted data deserialization until a patch is available. As a temporary workaround, avoid using the vulnerable JDBC functionality to minimize the risk of exploitation.