CVE-2026-59229: Privilege Escalation in Apache Software Foundation Apache IoTDB
Description
Apache IoTDB versions from 2.0.0 up to but not including 2.0.11 contain a privilege escalation vulnerability in the Legacy Pipe receiver protocol. The protocol uses a hardcoded SUPER_USER (root) identity when performing data loading and deletion operations. This allows users with SYSTEM-level privileges but without WRITE_DATA or DELETE_DATA permissions to execute these operations as root, bypassing the permission model. The issue is fixed in version 2.0.11.
Affected software
Apache Software Foundation
Apache IoTDB
pkg:maven/org.apache.iotdb/iotdbRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Legacy Pipe receiver protocol in Apache IoTDB versions >=2.0.0 and <2.0.11 uses a hardcoded SUPER_USER (root) identity during handshake and sendPipeData operations. This flaw permits a user with SYSTEM-level privileges (e.g., USE_PIPE or MAINTAIN) but lacking WRITE_DATA or DELETE_DATA permissions to send specially crafted PipeData messages that result in data loading or deletion operations executed with root privileges. This effectively bypasses IoTDB's permission enforcement, leading to privilege escalation. The vulnerability is resolved in version 2.0.11.
Potential Impact
An attacker with SYSTEM-level privileges but without explicit data write or delete permissions can escalate privileges to root within Apache IoTDB, enabling unauthorized data loading and deletion. This bypasses the intended permission model, potentially compromising data integrity and security within affected deployments.
Mitigation Recommendations
Users should upgrade Apache IoTDB to version 2.0.11 or later, where this privilege escalation vulnerability is fixed. No other mitigations are indicated by the vendor advisory.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- apache
- Date Reserved
- 2026-07-03T10:43:38.753Z
- State
- PUBLISHED
Threat ID: 6ad8a3312cdf04f656e682f0
Added to database: 10/21/2026, 11:34:09 UTC
Last enriched: 10/21/2026, 11:48:51 UTC
Last updated: 10/21/2026, 13:40:20 UTC
Views: 6
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.