Auth Bypass in Apache IoTDB 2.0.0pre2.0.11 Thrift RPC
CVE-2026-58663 Published on October 21, 2026
Apache IoTDB: Auth Bypass in pipeTransfer() interface
An authentication bypass vulnerability exists in Apache IoTDB's Thrift RPC service
This issue affects Apache IoTDB: from 2.0.0 before 2.0.11.
Users are recommended to upgrade to version 2.0.11, which fixes the issue.
Products Associated with CVE-2026-58663
Want to know whenever a new CVE is published for Apache Iotdb? stack.watch will email you.
Affected Versions
Apache Software Foundation Apache IoTDB:- Version 2.0.0 and below 2.0.11 is affected.