Live › vulnerability › CVE-2026-41114
Go to dashboardThe Apache IoTDB JDBC driver from 1.3.3 before 2.0.11 consumes resources without limit in some path. An attacker who can send it crafted input can exhaust memory or CPU on the client that uses the driver.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Applications that bundle the Apache IoTDB JDBC driver from 1.3.3 before 2.0.11 are in scope. The sources do not say which input path triggers the consumption, so whether a given deployment receives untrusted input is unknown.
No product ranges from the sources yet.
iotdb-jdbc in pom.xml or build.gradle1.3.3 up to but not including 2.0.112.0.11 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Uncontrolled Resource Consumption vulnerability in Apache IoTDB JDBC driver.
This issue affects Apache IoTDB JDBC driver: from 1.3.3 before 2.0.11.
Users are recommended to upgrade to version 2.0.11, which fixes the issue.
This page as .md · .json · in your agent: get_signal("CVE-2026-41114")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.