CVE-2026-40007: Apache IoTDB: Unauthenticated unbounded recursion in IoTDB AirGap receiver's E-language prefix parser causes per-connection StackOverflowError

<p>Posted by Haonan Hou on Jul 10</p>Severity: moderate <br /> <br /> Affected versions:<br /> <br /> - Apache IoTDB 1.0.0 before 2.0.10<br /> <br /> Description:<br /> <br /> Uncontrolled Recursion, Uncontrolled Resource Consumption vulnerability in Apache IoTDB.<br /> When pipe_air_gap_receiver_enabled=true, the IoTDB AirGap receiver&apos;s<br /> readLength method calls itself recursively each t