https://seclists.org/oss-sec/2026/q4/291: CVE-2026-58663: Apache IoTDB: Auth Bypass in pipeTransfer() interface
Published Oct 21, 2026
·Updated
Affected Software
1 affected component
Apache IoTDB>=2.0.0<2.0.11
Frequently Asked Questions
1
Which Apache IoTDB deployments require remediation?
Apache IoTDB versions from 2.0.0 through versions before 2.0.11 are affected. Version 2.0.11 contains the fix.
2
What mitigation is available if the issue is identified?
The advisory recommends upgrading Apache IoTDB to version 2.0.11. No alternative workaround or configuration-based mitigation is listed.