{"schema_version": "1.6.1", "id": "CVE-2026-63043", "summary": "Agent path traversal via unvalidated file source path", "details": "Relative Path Traversal vulnerability in Apache InLong. Arbitrary file read from the Agent host filesystem.\n\nThis issue affects Apache InLong: from 2.0.0 before 2.4.0.\n\n\n\nUsers are advised to upgrade to Apache InLong's  2.4.0 or cherry-pick [1] to solve it.\n\n[1]  https://github.com/apache/inlong/pull/12146 .", "affected": [{"ranges": [{"type": "SEMVER", "events": [{"introduced": "2.0.0"}, {"fixed": "2.4.0"}]}]}], "references": [{"type": "WEB", "url": "https://lists.apache.org/thread/0ohn861tzd9g7nsosd6oz3of6dvhvqnk"}]}