TI-2026-19350 CVE-2026-24013 · GHSA-qx5v-jm63-wqfj
Apache IoTDB: Authentication Bypass via Forged SessionID in Thrift RPC
Priority MEDIUM 48
Authentication Bypass by Spoofing vulnerability in Apache IoTDB.
Vulnerabilities
3 records
TI-2026-19349 CVE-2026-24012 · GHSA-m38g-pffj-4hcr
Apache IoTDB: Denial of Service via Resource Exhaustion in Aggregation Query
Priority MEDIUM 40
Uncontrolled Resource Consumption vulnerability in Apache IoTDB.
TI-2026-19351 CVE-2026-24014 · GHSA-rpg4-r93p-w6gg
Apache IoTDB: Path Traversal in DataNode Internal RPC Trigger JAR Upload Allows Arbitrary File Write
Priority MEDIUM 50
Apache IoTDB DataNode’s internal RPC interface for creating Trigger instances uses the uploaded Trigger JAR name to build a file path without sufficient validation.