What is GHSA-qhh3-6vw4-44c4?

GHSA-qhh3-6vw4-44c4 is a security advisory published by GitHub Security Advisories with Critical severity. An authentication bypass vulnerability exists in Apache IoTDB's Thrift RPC service This issue...

Which CVE IDs does GHSA-qhh3-6vw4-44c4 cover?

GHSA-qhh3-6vw4-44c4 covers the following CVE IDs: CVE-2026-58663. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-qhh3-6vw4-44c4?

GHSA-qhh3-6vw4-44c4 has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

GHSA-qhh3-6vw4-44c4CriticalCVSS 9.8

An authentication bypass vulnerability exists in Apache IoTDB's Thrift RPC service This issue...

Vendor

GitHub Security Advisories

Published

October 21, 2026

Last Modified

October 30, 2026

🔗 CVE IDs covered (1)

CVE-2026-58663 →

📋 Description

An authentication bypass vulnerability exists in Apache IoTDB's Thrift RPC service

This issue affects Apache IoTDB: from 2.0.0 before 2.0.11.

Users are recommended to upgrade to version 2.0.11, which fixes the issue.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-58663
https://lists.apache.org/thread.html/bt2o8n1bb3cv9h7k6rph7b208pfmpp31
http://www.openwall.com/lists/oss-security/2026/10/21/20
https://github.com/advisories/GHSA-qhh3-6vw4-44c4