CVE-2026-24713

CVE-2026-24713: Apache IoTDB: JEXL Expression Injection Vulnerability

Vendor Apache Software Foundation
Product Apache IoTDB
Weakness CWE-20 · Input validation
Published March 9, 2026
Last update March 10, 2026
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

Description

Improper Input Validation vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.0.0 before 1.3.7, from 2.0.0 before 2.0.7. Users are recommended to upgrade to version 1.3.7 or 2.0.7, which fixes the issue.

Key dates

Disclosure timeline

March 9, 2026 CVE published
March 10, 2026 Record updated