CVE-2026-40005: Apache IoTDB: Path Traversal in Pipe File Transfer Receiver

<p>Posted by Haonan Hou on Jul 10</p>Severity: important <br /> <br /> Affected versions:<br /> <br /> - Apache IoTDB 1.0.0 before 2.0.10<br /> <br /> Description:<br /> <br /> Improper Limitation of a Pathname to a Restricted Directory (&apos;Path Traversal&apos;) vulnerability in Apache IoTDB.<br /> An attacker can write arbitrary files anywhere the IoTDB process has write permissions with unsaf