CVE-2026-59562
CVE-2026-59562 · Apache IoTDB: Remote code execution and Unauthenticated path traversal in legacy pipe sendFile RPC
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Missing authentication for critical function vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 2.0.0 before 2.0.11. Users are recommended to upgrade to version 2.0.11, which fixes the issue.
EPSS 0.3% · Fix available
- Published
- Updated
Affected products and versions
apache iotdb
- Versions
- ≥ 2.0.0, < 2.0.11: Affected (semver)
Update to 2.0.11