CVE-2026-24014

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-24014
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-24014.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-24014
Aliases
Published
2026-07-06T08:34:26.447Z
Modified
2026-08-12T03:51:10.680099568Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
Apache IoTDB: Path Traversal in DataNode Internal RPC Trigger JAR Upload Allows Arbitrary File Write
Details

Apache IoTDB DataNode’s internal RPC interface for creating Trigger instances uses the uploaded Trigger JAR name to build a file path without sufficient validation. If the internal DataNode RPC port is exposed to an untrusted network, an attacker may use path traversal sequences in the JAR name to write files outside the intended Trigger installation directory. This could allow arbitrary file write with the permissions of the IoTDB process.

This issue affects Apache IoTDB: from 1.3.3 before 2.0.8.

Users are recommended to upgrade to version 2.0.8, which fixes the issue.

Database specific 
{
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "1.3.3"
                },
                {
                    "fixed": "2.0.8"
                }
            ],
            "source": "AFFECTED_FIELD"
        },
        {
            "extracted_events": [
                {
                    "introduced": "1.3.3"
                },
                {
                    "fixed": "2.0.8"
                }
            ],
            "source": "DESCRIPTION"
        }
    ],
    "cna_assigner": "apache",
    "cwe_ids": [
        "CWE-284",
        "CWE-434"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/24xxx/CVE-2026-24014.json"
}
References

Affected packages

Git / github.com/apache/iotdb

Affected ranges

Type
GIT
Repo
https://github.com/apache/iotdb
Events
Introduced
ad95a7ee57990f7ce5d1503643a3b20936da51e7
Fixed
b88b5dc62ffb0329fdc4dfd479fc46e9cf416a56
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "1.3.3"
        },
        {
            "fixed": "2.0.8"
        }
    ],
    "source": "CPE_RANGE",
    "cpe": "cpe:2.3:a:apache:iotdb:*:*:*:*:*:*:*:*"
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-24014.json"