PYSEC-2026-2079

Uncontrolled Resource Consumption vulnerability in Apache IoTDB. Some interface fails to impose reasonable limits on the time span and aggregation interval of the query. An attacker can construct a request with extreme parameters e.g., a very large time range combined with a minimal interval. Thi...

CVE-2026-24012

Uncontrolled Resource Consumption vulnerability in Apache IoTDB. Some interface fails to impose reasonable limits on the time span and aggregation interval of the query. An attacker can construct a request with extreme parameters e.g., a very large time range combined with a minimal interval. Thi...

CVE-2026-24012

Apache IoTDB (versions 1.3.3 through 2.0.7 ) is vulnerable to an Uncontrolled Resource Consumption vulnerability in its aggregation query interface. The root cause is a failure to impose reasonable limits on the time span and aggregation interval of queries. An attacker can exploit this by constr...