A vulnerability, which was classified as critical, has been found in Apache IoTDB up to 1.3.5/2.0.6. This affects an unknown part. Performing a manipulation results in path traversal.
This vulnerability is identified as CVE-2025-64152. The attack can be initiated remotely. There is not any exploit available.
It is advisable to upgrade the affected component.
