Server-Side Request Forgery in Apache InLong Affects Multiple Versions

CVE-2026-63044

What is CVE-2026-63044?

A Server-Side Request Forgery (SSRF) vulnerability exists in Apache InLong that allows authenticated users to manipulate the InLong Manager server into making outbound HTTP requests or TCP connections to arbitrary internal hosts and ports. This issue poses a significant risk as it can enable unauthorized access to sensitive internal services. Affected users are strongly advised to upgrade to Apache InLong version 2.4.0 or implement specific fixes to mitigate exploitation of this vulnerability.

References