CVE-2026-58663

Description

An authentication bypass vulnerability exists in Apache IoTDB's Thrift RPC service This issue affects Apache IoTDB: from 2.0.0 before 2.0.11. Users are recommended to upgrade to version 2.0.11, which fixes the issue.

Affected products

• Apache Software Foundation / Apache IoTDB2.0.0 – 2.0.11

References

• MAILING_LISThttps://lists.apache.org/thread.html/bt2o8n1bb3cv9h7k6rph7b208pfmpp31