Apache IoTDB: hard-coded credentials

The Legacy Pipe receiver protocol (handshake / sendPipeData) uses a

hardcoded SUPER_USER (root) identity when executing data loading and

deletion operations. A user with only SYSTEM-level privileges (such as

USE_PIPE or MAINTAIN) who does NOT have WRITE_DATA or DELETE_DATA

permissions on target databases can send specially crafted PipeData

messages through the Legacy Pipe API, resulting in data loading/deletion

operations executed as root — effectively bypassing IoTDB's permission

model entirely.

This issue affects Apache IoTDB: from 2.0.0 before 2.0.11.

Users are recommended to upgrade to version 2.0.11, which fixes the issue.