A vulnerability has been found in Apache IoTDB up to 1.3.6/2.0.6 and classified as critical. This issue affects some unknown processing. The manipulation leads to privilege escalation.

This vulnerability is listed as CVE-2026-24015. The attack may be initiated remotely. There is no available exploit.

The affected component should be upgraded.