CVE-2026-59229

Awaiting Analysis Awaiting Analysis - Queue

Privilege Escalation in Apache IoTDB via Legacy Pipe Protocol

Publication date: 2026-10-21

Last updated on: 2026-10-30

Assigner: Apache Software Foundation

Description

The Legacy Pipe receiver protocol (handshake / sendPipeData) uses a hardcoded SUPER_USER (root) identity when executing data loading and deletion operations. A user with only SYSTEM-level privileges (such as USE_PIPE or MAINTAIN) who does NOT have WRITE_DATA or DELETE_DATA permissions on target databases can send specially crafted PipeData messages through the Legacy Pipe API, resulting in data loading/deletion operations executed as root — effectively bypassing IoTDB's permission model entirely. This issue affects Apache IoTDB: from 2.0.0 before 2.0.11. Users are recommended to upgrade to version 2.0.11, which fixes the issue.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-21

Last Modified

2026-10-30

Generated

2026-11-10

AI Q&A

2026-10-21

EPSS Evaluated

2026-11-09

NVD

CVE-2026-59229

EUVD

EUVD-2026-107167

Affected Vendors & Products

Vendor	Product	Version / Range
Apache Software Foundation	Apache IoTDB	2.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-798	The product contains hard-coded credentials, such as a password or cryptographic key.

Attack-Flow Graph

Executive Summary

This vulnerability in Apache IoTDB involves the Legacy Pipe receiver protocol using a hardcoded root identity for data operations. Users with limited SYSTEM-level privileges can send crafted messages to execute data loading or deletion as root, bypassing normal permission checks.

Detection Guidance

To detect this vulnerability, check if your Apache IoTDB version is between 2.0.0 and 2.0.10. Run the command 'iotdb --version' to verify the installed version. If the version is within this range, the system is vulnerable.

Impact Analysis

An attacker with SYSTEM-level access could exploit this to modify or delete data without proper WRITE_DATA or DELETE_DATA permissions. This could lead to unauthorized data changes, data loss, or system compromise in affected IoTDB versions.

Compliance Impact

This vulnerability could violate compliance requirements that mandate strict access controls and auditability for data operations. Unauthorized root-level data changes may lead to non-compliance with GDPR, HIPAA, or other regulations due to insufficient permission enforcement.

Mitigation Strategies

Upgrade Apache IoTDB to version 2.0.11 or later to fix the vulnerability. This version addresses the hardcoded root identity issue in the Legacy Pipe receiver protocol.

Hi! I’m here to help you understand CVE-2026-59229. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...