Skip to content
fr Sign in
Not rated

CVE-2025-26864 Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File…

Description

Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File vulnerability in the OpenIdAuthorizer of Apache IoTDB. This issue affects Apache IoTDB: from 0.10.0 through 1.3.3, from 2.0.1-beta before 2.0.2. Users are recommended to upgrade to version 1.3.4 and 2.0.2, which fix the issue.

Affected products and versions

Product Affected versions Fixed in
Apache IoTDB 2.0 2.0.1-beta → < 2.0.2 2.0.2
Apache IoTDB 0.10 0.10.0 → 1.3.3 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Apache IoTDB

The 28 CVEs of Apache IoTDB →
CVE-2026-59229 The Legacy Pipe receiver protocol (handshake / sendPipeData) uses a hardcoded SUPER_USER (root) identity when… Not rated CVE-2026-59562 Missing authentication for critical function vulnerability in Apache IoTDB Not rated CVE-2026-58663 An authentication bypass vulnerability exists in Apache IoTDB's Thrift RPC service This issue affects Apache IoTDB: from… Not rated CVE-2026-44630 Improper validation of length fields in the Apache IoTDB RPC service may allow a remote unauthenticated attacker to… Not rated
Track this CVE