GHSA-xrvj-h9w2-3q69CriticalCVSS 9.1

Apache IoTDB has a Path Traversal vulnerability

Published
June 26, 2026
Last Modified
November 3, 2026

🔗 CVE IDs covered (1)

CVE-2025-55017 →

📋 Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache IoTDB.

This issue affects Apache IoTDB: from 2.0.0 before 2.0.6, from 1.0.0 before 1.3.6.

Users are recommended to upgrade to version 1.3.6 and 2.0.6, which fixes the issue.

🎯 Affected products2

  • maven/org.apache.iotdb:iotdb-server:>= 2.0.0, < 2.0.6
  • maven/org.apache.iotdb:iotdb-server:>= 1.0.0, < 1.3.6

🔗 References (10)