Severity
High
Analysis Summary
CVE-2025-27531
Apache InLong could allow a remote to obtain sensitive information, caused by the deserialization of untrusted data. By double writing the param, an attacker could exploit this vulnerability to read arbitrary files for JDBC.
Impact
- Information Disclosure
Indicators of Compromise
CVE
CVE-2025-27531
Affected Vendors
Apache
Affected Products
- Apache InLong - 1.13.0
- Apache InLong - 2.0.0
Remediation
Refer to the Apache Security Advisory for patch, upgrade, or suggested workaround information.