A vulnerability has been found in Apache IoTDB up to 1.3.6/2.0.6 and classified as critical. This issue affects some unknown processing. The manipulation leads to privilege escalation.
This vulnerability is listed as CVE-2026-24015. The attack may be initiated remotely. There is no available exploit.
The affected component should be upgraded.