CVE-2025-55017 in IoTDB

Prediction

by VulDB Data Team • 03/09/2026

A security vulnerability has been detected in Apache IoTDB up to 1.3.5/2.0.5. Affected by this issue is some unknown functionality. Such manipulation leads to path traversal. It is possible to launch the attack remotely. Upgrading to version 1.3.6 and 2.0.6 can resolve this issue. Upgrading the affected component is advised.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Moderation: accepted
• Entry: VDB-349791
• CPE: ready
• CWE: CWE-22 (confirmed)
• CVSS: 6.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: very low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-55017
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-55017
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-55017/