01 Record

CVE-2026-63046

Apache InLong: Agent Installer — Command Injection to RCE via Default Credentials

HighPUBLISHEDCNA: apache

Base score8.8 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

02 Description

Apache InLong: Agent Installer — Command Injection to RCE via Default Credentials

Published

2026-08-21 08:37Z16 HR AGO

Last updated

2026-08-21 18:42Z6 HR AGO

Reserved

2026-07-15

Assigning CNA

apache

Record state

PUBLISHED

Severity

High (CVSS 8.8)

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-88Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')Base

SSVC decision

ExploitationnoneAutomatablenoTechnical Impacttotal

Data version

5.2

Document digest

1e80a142dc86b11fd3b70fe42024a07945e8f15fc7a849e115100ef96f50c64f

VendorProductVersionsPlatforms

Apache Software FoundationApache InLong2.0.0 to < 2.4.0—