Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-58663

Apache IoTDB: Auth Bypass in pipeTransfer() interface

Description

An authentication bypass vulnerability exists in Apache IoTDB's Thrift RPC service This issue affects Apache IoTDB: from 2.0.0 before 2.0.11. Users are recommended to upgrade to version 2.0.11, which fixes the issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache IoTDB

Default version status: unaffected

  • 2.0.0 to < 2.0.11affected

References