CVE-2025-48459: Apache Iotdb

Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days.

Deserialization of Untrusted Data vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.0.0 before 2.0.5. Users are recommended to upgrade to version 2.0.5, which fixes the issue.

Affected products

• Apache Iotdb: from 1.0.0, before 2.0.5 (fixed in 2.0.5)

Published 2025-09-24. Last modified 2026-09-26.