Vulnerabilities CVE-2026-63038

CVE-2026-63038

None

Open

TLP:CLEAR

Apache InLong: SQL Injection via String Concatenation Vulnerability Report

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache InLong. This allows an attacker to inject arbitrary SQL code through the dbName, tableName, schemaName, and username parameters. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are advised to upgrade to Apache InLong's 2.4.0 or cherry-pick [1] to solve it. [1] https://github.com/apache/inlong/issues/12135 .

Details

Confidence: 90%
Published: Aug 20, 2026
Last Modified: Aug 20, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.