A vulnerability classified as problematic was found in Apache IoTDB up to 2.0.7. This issue affects some unknown processing of the component Query Processor. The manipulation results in resource consumption.

This vulnerability is identified as CVE-2026-24012. The attack can be executed remotely. There is not any exploit available.