CVE-2026-58663
CVE-2026-58663 · Apache IoTDB: Auth Bypass in pipeTransfer() interface
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An authentication bypass vulnerability exists in Apache IoTDB's Thrift RPC service This issue affects Apache IoTDB: from 2.0.0 before 2.0.11. Users are recommended to upgrade to version 2.0.11, which fixes the issue.
EPSS 0.3% · Fix available
- Published
- Updated
Affected products and versions
apache iotdb
- Versions
- ≥ 2.0.0, < 2.0.11: Affected (semver)
Update to 2.0.11