CVE-2025-27531: Apache InLong: An arbitrary file read vulnerability for JDBC

[Charles Zhang <dockerzhang () apache org>]

Severity: moderate

Affected versions:

- Apache InLong 1.13.0 before 2.1.0

Description:

Deserialization of Untrusted Data vulnerability in Apache InLong. 

This issue affects Apache InLong: from 1.13.0 before 2.1.0, this can lead to bypass by double writing the param.





Users are recommended to upgrade to version 2.1.0, which fixes the issue.

Credit:

Ming (finder)

References:

https://inlong.apache.org
https://www.cve.org/CVERecord?id=CVE-2025-27531