Access Control Vulnerability in Apache InLong Affecting Unauthorized Stream Source Deletion

CVE-2026-63040

What is CVE-2026-63040?

A vulnerability exists in Apache InLong that allows authenticated users to bypass authorization checks within the StreamSource component. This flaw enables any authenticated user to logically delete all stream sources without appropriate permissions. It is critical for users of Apache InLong versions prior to 2.4.0 to update to the latest version to mitigate this risk and ensure the integrity of their stream sources.

References