Description
Improper Neutralization of Argument Delimiters in a Command (-Argument Injection-) vulnerability in Apache InLong. Agent Installer-s ModuleManager executes arbitrary shell commands via ExcuteLinux.exeCmd() with no filtering or whitelist validation. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are advised to upgrade to Apache InLong-s 2.4.0 or cherry-pick [1]/[2] to solve it. [1] https://github.com/apache/inlong/pull/12151 . [2] https://github.com/apache/inlong/pull/12155 .
CVSS 8.8EPSS 0.363%Risque 0.91
Voir la source- Publication
- 2026-08-21 09:16:40
- Versions concernées
- >=2.0.0,<2.4.0
- Type
- Bibliothèque
- Dernière modification
- 2026-08-27 14:35:40
- Vecteur
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H