IoTDB (< 2.0.11) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/iotdb--2.0.11/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 21 Oct 2026 17:06:50 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgApache IoTDB: Privilege escalation in Legacy Pipe protocol (CVE-2026-59229)https://feed.craftedsignal.io/briefs/2026-10-apache-iotdb-privilege-escalation/Wed, 21 Oct 2026 17:06:50 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-apache-iotdb-privilege-escalation/Apache IoTDB versions 2.0.0 through 2.0.10 contain a privilege escalation vulnerability where the Legacy Pipe receiver protocol uses a hardcoded root identity to perform unauthorized data operations.Apache IoTDB versions 2.0.0 through 2.0.10 are vulnerable to a privilege escalation flaw in the Legacy Pipe receiver protocol (CVE-2026-59229). The vulnerability stems from the protocol using a hardcoded SUPER_USER (root) identity when executing data loading and deletion operations. An authenticated attacker possessing only system-level privileges (such as USE_PIPE or MAINTAIN) can bypass authorization checks to perform WRITE_DATA or DELETE_DATA operations on unauthorized databases by sending specially crafted PipeData messages.

Impact

Successful exploitation allows authenticated users with restricted system-level permissions to perform data modification or deletion tasks that they are otherwise unauthorized to execute.

Recommendation

Upgrade Apache IoTDB to version 2.0.11 or later to resolve the hardcoded credential usage in the Legacy Pipe receiver protocol.

]]>highadvisoryprivilege-escalationiotdbvulnerability