THREAT OPS › Threat News › CVE-2026-63042: Apache InLong: Missing authorization on DataNode management endpoints
CVE-2026-63042: Apache InLong: Missing authorization on DataNode management endpoints
<p>Posted by Charles Zhang on Aug 20</p>Severity: moderate <br /> <br /> Affected versions:<br /> <br /> - Apache InLong 2.0.0 before 2.4.0<br /> <br /> Description:<br /> <br /> Files or Directories Accessible to External Parties vulnerability in Apache InLong. Any user who can authenticate to <br /> the manager can create, modify and delete Data Node definitions.<br /> <br /> This issue affects
Indicators of compromise
- CVE-2026-63042cve
Original source: https://seclists.org/oss-sec/2026/q3/536