CVE-2025-27526

Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 through 2.1.0. This vulnerability which can lead to JDBC Vulnerability URLEncdoe and backspace bypass. Users are advised to upgrade to Apache InLong's 2.2.0 or cherry-pick [1] to solve it. [1]  https://github.com/apache/inlong/pull/11747

• CWE-502

• https://github.com/apache/inlong/pull/11747Issue Tracking
• https://lists.apache.org/thread/4t4sqscm7xdqn883dyjy40qk6ncf26xfVendor Advisory
• http://www.openwall.com/lists/oss-security/2025/05/28/1Mailing List, Third Party Advisory

Published

May 28, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-27520BentoML is a Python library for building online serving syst…9.8
• CVE-2025-27521Vulnerability of improper access permission in the process m…5.5
• CVE-2025-27522Deserialization of Untrusted Data vulnerability in Apache In…6.5
• CVE-2025-27523XXE vulnerability in Hitachi JP1/IT Desktop Management 2 - S…8.7
• CVE-2025-27524Weak encryption vulnerability in Hitachi JP1/IT Desktop Mana…5.3
• CVE-2025-27525Information Exposure vulnerability in Hitachi JP1/IT Desktop…3.9
• CVE-2025-27528Deserialization of Untrusted Data vulnerability in Apache In…9.1
• CVE-2025-2753A vulnerability was found in Open Asset Import Library Assim…8.8
• CVE-2025-27531Deserialization of Untrusted Data vulnerability in Apache In…9.8
• CVE-2025-27532A vulnerability in the “Backup & Restore” functionality of t…6.5
• CVE-2025-27533Memory Allocation with Excessive Size Value vulnerability in…7.5
• CVE-2025-27534in OpenHarmony v5.0.2 and prior versions allow a local attac…5.5