Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache IoTDB

28 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-40009

    Apache IoTDB: Authenticated users can escalate to full tree-path access by renaming themselves to __internal_auditor

    Improper Privilege Management, Improper Access Control vulnerability in Apache IoTDB. Authenticated users can escalate to full tree-path access by renaming themselves to __internal_auditor. This issue affects Apache IoTDB: from 2.0.8 before 2.0.10. Users are …

    Apache Software Foundation Apache IoTDB
  • Medium 5.3
    CVE-2025-48459

    Apache IoTDB: Deserialization of untrusted Data

    Deserialization of Untrusted Data vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.0.0 before 2.0.5. Users are recommended to upgrade to version 2.0.5, which fixes the issue.

    Apache Software Foundation Apache IoTDB apache-iotdb org.apache.iotdb:iotdb-confignode Maven PyPI