CVE-2025-48459 | Apache IoTDB up to 2.0.4 deserialization

September 24, 2025 Yanac

A vulnerability was found in Apache IoTDB up to 2.0.4. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. Such manipulation leads to deserialization.

This vulnerability is listed as CVE-2025-48459. The attack must be carried out from within the local network. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More