PT-2026-79344 · Apache · Apache Inlong

Icysun

·

CVE-2026-63046

·

Published

2026-08-21

·

Updated

2026-08-27

CVSS v3.1

8.8

High

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Apache InLong versions 2.0.0 through 2.3.x
Description An argument injection issue exists in the Agent Installer's ModuleManager. The system executes arbitrary shell commands through the ExcuteLinux.exeCmd() function because it lacks proper filtering or whitelist validation of argument delimiters.
Recommendations Upgrade to version 2.4.0.

Fix

RCE

Argument Injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-88

Related Identifiers

CVE-2026-63046

Affected Products

Apache Inlong