Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

Apache IoTDB lets attackers write files via trigger upload

CVE-2026-24014 · published 4 months ago
Summary

If the internal communication port of Apache IoTDB is reachable from outside, an attacker can name a trigger file so that the system saves it outside the intended folder, effectively writing any file it wants. This could let the attacker place malicious files or change settings with the same rights as the IoTDB service. Upgrade to version 2.0.8 or later to stop this behavior.

What to do
  • Update apache software foundation apache iotdb to version 2.0.8 or later.
  • Update apache iotdb to version 2.0.8 or later.
Affected software
VendorProductAffected versions
apache software foundation apache iotdb < 2.0.8
apache iotdb >= 1.3.3, < 2.0.8
cpe:2.3:a:apache:iotdb:*:*:*:*:*:*:*:*
Original advisory text
Apache IoTDB: Path Traversal in DataNode Internal RPC Trigger JAR Upload Allows Arbitrary File Write
Apache IoTDB DataNode’s internal RPC interface for creating Trigger instances uses the uploaded Trigger JAR name to build a file path without sufficient validation. If the internal DataNode RPC port is exposed to an untrusted network, an attacker may use path traversal sequences in the JAR name to write files outside the intended Trigger installation directory. This could allow arbitrary file write with the permissions of the IoTDB process.

This issue affects Apache IoTDB: from 1.3.3 before 2.0.8.

Users are recommended to upgrade to version 2.0.8, which fixes the issue.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
9.8 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-284Improper Access Control
CWE-434Unrestricted File Upload
Timeline
Published6 Jul 2026
Updated7 Nov 2026
First seen6 Jul 2026
Sources
CVE-2026-24014 · NVD
CVE-2026-24014 · MITRE
CVE-2026-24014 · OSV
Track software like this
Free during beta