CVE-2025-26795

High

Advisory

Published 14 May 2025In the index since 6 Sept 2026

Apache IoTDB JDBC Driver Discloses Sensitive Information via Log Files

Carried by container images the latest versions of 2 of 17,781 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
iotdb-jdbcmaven	0.11.2, 0.13.3	1.3.4	2

2 by stars

Chart

Latest

Affected images

Radar Score

hertzbeatkubesphere-test

1 of the 4 container images this version deploys carry CVE-2025-26795.

Container image	Digest	Package	Fixed in
apache/iotdb :0.13.3-node	afa47bf1692a	iotdb-jdbc@0.13.3	1.3.4

7,710

apache-iotdbapache-iotdb-single-node

1 of the 1 container images this version deploys carry CVE-2025-26795.

Container image	Digest	Package	Fixed in
apache/iotdb :0.11.2	8647309f95d1	iotdb-jdbc@0.11.2	1.3.4

5,277

2 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
apache/iotdb :0.11.2	8647309f95d1	iotdb-jdbc@0.11.2	1.3.4	1
apache/iotdb :0.13.3-node	afa47bf1692a	iotdb-jdbc@0.13.3	1.3.4	1