CVE-2026-63038: Apache InLong: SQL Injection via String Concatenation Vulnerability Report

<p>Posted by Charles Zhang on Aug 20</p>Severity: important <br /> <br /> Affected versions:<br /> <br /> - Apache InLong 2.0.0 before 2.4.0<br /> <br /> Description:<br /> <br /> Improper Neutralization of Special Elements used in an SQL Command (&apos;SQL Injection&apos;) vulnerability in Apache InLong. <br /> This allows an attacker to inject arbitrary SQL code through the<br /> dbName, tableNa