CVE-2026-44630— Apache IoTDB: RPC service denial of service via unchecked Thrift string length
Quick assessment
Affected
Apache Software Foundation Apache IoTDB
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Apache iotdb是美国Apache基金会开源的一款物联网数据库。 Apache IoTDB 1.3.8之前版本和2.0.0至2.0.9之前版本存在资源管理错误漏洞，该漏洞源于RPC服务对长度字段验证不当，可能导致远程未授权攻击者通过发送特制畸形Thrift帧，使IoTDB分配过多内存并因OutOfMemoryError崩溃，造成拒绝服务。
Possible ATT&CK Techniques 1 AI
T1499 · Endpoint Denial of ServiceAffected Version Matrix 2
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Apache Software Foundation | Apache IoTDB | < 1.3.8 |
affected |
2.0.0< 2.0.10 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-44630
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Apache IoTDB: RPC service denial of service via unchecked Thrift string length
Source: CVE Program / CVE List V5
Vulnerability Description
Improper validation of length fields in the Apache IoTDB RPC service may allow a remote unauthenticated attacker to cause a denial of service. By sending a crafted malformed Thrift frame, an attacker can cause IoTDB to allocate an excessive amount of memory and crash with an OutOfMemoryError.
This issue affects Apache IoTDB: before 1.3.8, from 2.0.0 before 2.0.9.
Users are recommended to upgrade to version 2.0.10, which fixes the issue.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
未经控制的内存分配
Source: CVE Program / CVE List V5
Vulnerability Title
Apache IoTDB 资源管理错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Apache iotdb是美国Apache基金会开源的一款物联网数据库。 Apache IoTDB 1.3.8之前版本和2.0.0至2.0.9之前版本存在资源管理错误漏洞，该漏洞源于RPC服务对长度字段验证不当，可能导致远程未授权攻击者通过发送特制畸形Thrift帧，使IoTDB分配过多内存并因OutOfMemoryError崩溃，造成拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Apache Software Foundation | Apache IoTDB | 0 ~ 1.3.8 | - |
|
II. Public POCs for CVE-2026-44630
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-44630
请登录查看更多情报信息。
Mailing List Discussions for CVE-2026-44630 (1)
Same Patch Batch · Apache Software Foundation · 2026-08-10 · 15 CVEs total
| CVE-2026-65948 | Apache Ranger: UnixAuth lacks brute-force protection | |
| CVE-2026-65945 | Apache Ranger: Logs contain replayable JWT bearer tokens | |
| CVE-2026-65942 | Apache Ranger: Clients accept TLS certificates issued for other hostnames | |
| CVE-2026-55814 | Apache Ranger: Download APIs expose plugin data without authentication | |
| CVE-2026-55799 | Apache Ranger: Remote Code Execution Vulnerability in GraalScriptEngineCreator | |
| CVE-2026-44416 | Apache Ranger: Remote Code Execution via Arbitrary Class Instantiation | |
| CVE-2026-42537 | Apache Ranger: Remote Code Execution via JDBC URL Injection | |
| CVE-2026-40920 | Apache Ranger: Privilege Escalation via URL Parameter | |
| CVE-2026-32227 | Apache Ranger: SQL Injection vulnerability in lookup functionality | |
| CVE-2026-28672 | Apache Ranger: OS Command Injection via Username in UnixUserGroupBuilder | |
| CVE-2026-61899 | Apache Tapestry: Possible classpath file download through URL manipulation | |
| CVE-2026-68870 | Apache Airflow Microsoft Azure provider: microsoft.azure Key Vault backend: team-scope gua | |
| CVE-2026-68871 | Apache Airflow Yandex provider: yandex Lockbox backend: team-scope guard bypass resolves a | |
| CVE-2026-68872 | Apache Airflow Amazon provider: amazon SSM / Secrets Manager backends: team-scope guard by |
IV. Related Vulnerabilities
Same product: Apache IoTDB
-
CVE-2026-40452
Apache IoTDB: Authorization bypass in /rest/v2/fastLastQuery -
CVE-2026-40009
Apache IoTDB: Authenticated users can escalate to full tree- -
CVE-2026-40008
Apache IoTDB: Arbitrary Class Instantiation via Pipe Transfe -
CVE-2026-40007
Apache IoTDB: Unauthenticated unbounded recursion in IoTDB A -
CVE-2026-40006
Apache IoTDB: Unauthenticated heap-exhaustion DoS via unboun
Same vendor: Apache Software Foundation
-
CVE-2026-95616
Apache WSS4J: Unauthenticated denial of service via integer -
CVE-2026-92899
Apache WSS4J: UsernameToken replay protection bypassed by re -
CVE-2026-92121
Apache WSS4J: WS-SecurityPolicy signature checks skipped in -
CVE-2026-89238
Apache WSS4J: WSS4J EncryptedHeader child confusion causing -
CVE-2026-88920
Apache WSS4J: SAML Sender-Vouches Authentication Bypass
Same weakness: CWE-789
-
CVE-2026-102510
Apache PLC4X: Go binding: unbounded allocation and framing f -
CVE-2026-102509
Apache PLC4X, Apache PLC4X: Pre-authentication resource exha -
CVE-2026-102809
PX4 Autopilot through 1.17.0 Stack Exhaustion via tests file -
CVE-2026-92550
Apache Qpid Broker-J: Type size/count handling can lead to e -
CVE-2026-96260
Mattermost server missing request body size limit on plugin
V. Comments for CVE-2026-44630
No comments yet