CVE-2026-40007

Apache IoTDB versions 1.0.0 before 2.0.10 are vulnerable to Uncontrolled Recursion and Uncontrolled Resource Consumption . When the pipe_air_gap_receiver_enabled configuration is set to true , the AirGap receiver's readLength method recursively calls itself upon identifying the E-language prefix ...