CVE-2026-58663: Apache IoTDB: Auth Bypass in pipeTransfer() interface

Posted by Haonan Hou on Oct 21 Severity: important Affected versions: - Apache IoTDB 2.0.0 before 2.0.11 Description: An authentication bypass vulnerability exists in Apache IoTDB's Thrift RPC service This issue affects Apache IoTDB: from 2.0.0 before 2.0.11. Users are recommended to upgrade to version 2.0.11, which fixes the issue. Credit: Anurag Kumar (https://www.linkedin.com/in/anurag-kumar-8413a0197) (analyst) References: https://iotdb.apache.org...

Published 21-Oct-2026 17:00 UTC · First seen 21-Oct-2026 16:59 UTC

Sources

• Open Source Security · 21-Oct-2026