CVE-2026-63040: Apache InLong: Missing authorization in StreamSource forceDelete

<p>Posted by Charles Zhang on Aug 20</p>Severity: moderate <br /> <br /> Affected versions:<br /> <br /> - Apache InLong 2.0.0 before 2.4.0<br /> <br /> Description:<br /> <br /> Files or Directories Accessible to External Parties vulnerability in Apache InLong. StreamSource performs no <br /> authorization check, any authenticated user can logically delete ALL stream sources.<br /> <br /> This is