CVE-2025-26864 | Apache IoTDB up to 1.3.3/2.0.2 OpenID Authentication log file

A vulnerability has been found in Apache IoTDB up to 1.3.3/2.0.2 and classified as problematic. This vulnerability affects unknown code of the component OpenID Authentication. The manipulation leads to sensitive information in log files.

This vulnerability was named CVE-2025-26864. The attack can only be initiated within the local network. There is no exploit available.

It is recommended to upgrade the affected component.