CVE-2026-63044: Apache InLong: Authenticated SSRF via POST /api/node/testConnection

<p>Posted by Charles Zhang on Aug 20</p>Severity: important <br /> <br /> Affected versions:<br /> <br /> - Apache InLong 2.0.0 before 2.4.0<br /> <br /> Description:<br /> <br /> Server-Side Request Forgery (SSRF) vulnerability in Apache InLong.  Any authenticated user (no admin role required) can <br /> cause the InLong Manager server to make outbound HTTP requests or TCP connections to<br /> ar