Uncontrolled Resource Consumption in Apache IoTDB JDBC Driver
CVE-2026-41114

Currently unrated

Key Information:

Vendor

Apache
Status
Apache Iotdb Jdbc Driver
Vendor
CVE Published:
21 October 2026

What is CVE-2026-41114?

The Apache IoTDB JDBC driver is susceptible to an uncontrolled resource consumption vulnerability, which can lead to excessive resource usage when untrusted input is processed. This issue affects versions from 1.3.3 through 2.0.10, where improper validation or limitations on resource utilization may allow an attacker to exhaust system resources, potentially disrupting service. Users are strongly urged to upgrade to version 2.0.11 to mitigate this risk.

Affected Version(s)

Apache IoTDB JDBC driver 1.3.3 < 2.0.11

References

https://lists.apache.org/thread.html/tvmqslwyqmglr19dccck...
vendor-advisory

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ho1aAs (GitHub: @HolaAsuka)
movonow (GitHub: @movonow)
zhid889773 (GitHub: @zhid889773)
WA-888 (GitHub: @WA-888)
binghuangczc (Email: 572929574@qq.com)
errors11 (Github: @errors11)
Phoexina (Github: @Phoexina)
skydiver-jay (Github: @skydiver-jay)
V9d0g (Github: @V9d0g)
FlyFish (Email: 2811469022@qq.com)
.