CVE-2026-40007

Name of the Vulnerable Software and Affected Versions Apache IoTDB versions 1.0.0 through 2.0.9

Description An issue involving uncontrolled recursion and resource consumption exists in the IoTDB AirGap receiver. When the pipe air gap receiver enabled variable is set to true, the readLength() function calls itself recursively without a depth limit whenever it recognizes the E-language prefix in socket data. An unauthenticated attacker can exploit this by sending a stream of repeated E-language prefixes, causing the JVM stack of the receiver thread to be exhausted and triggering a StackOverflowError.

Recommendations Upgrade to version 2.0.10. As a temporary mitigation, set the pipe air gap receiver enabled variable to false to disable the affected receiver.