Sensitive Information Exposure in Apache IoTDB
CVE-2025-26864
7.5HIGH
What is CVE-2025-26864?
The OpenIdAuthorizer component of Apache IoTDB is vulnerable to a risk that allows unauthorized actors to access sensitive information. The affected versions include Apache IoTDB 0.10.0 through 1.3.3 and 2.0.1-beta prior to 2.0.2, where sensitive data may be improperly logged, potentially leading to information leaks. It is strongly advised to upgrade to versions 1.3.4 and 2.0.2, which address and remediate this issue.
Affected Version(s)
Apache IoTDB 0.10.0 <= 1.3.3
Apache IoTDB 2.0.1-beta < 2.0.2