# \#security **URL:** https://community.influxdata.com/tag/security/104.md [Latest](https://community.influxdata.com/latest.md) · [Categories](https://community.influxdata.com/categories.md) · [Tags](https://community.influxdata.com/tags.md) --- ## [Kapacitor v1.8.6 vulnerabiltity](https://community.influxdata.com/t/kapacitor-v1-8-6-vulnerabiltity/58642)
**Author:** [@Quinn\_Nguyen](https://community.influxdata.com/u/Quinn_Nguyen)\ **Replies:** 2\ **Last updated:** [July 24, 2026, 12:59am UTC](https://community.influxdata.com/t/kapacitor-v1-8-6-vulnerabiltity/58642 "2026-07-24T00:59:24Z")
Hello, We are testing kapacitor and found that we can authenticate as any user by using a JWT token signed with an empty shared-secret. This is an authentication bypass whenever shared-secret is left empty in the config… --- ## [Critical & High with Kapacitor Binaries](https://community.influxdata.com/t/critical-high-with-kapacitor-binaries/58451)
**Author:** [@sathya6045](https://community.influxdata.com/u/sathya6045)\ **Replies:** 2\ **Last updated:** [May 6, 2026, 8:50pm UTC](https://community.influxdata.com/t/critical-high-with-kapacitor-binaries/58451 "2026-05-06T20:50:17Z")
Hi Team, With recent Trivy scan, we identified one Critical and several High severity vulnerabilities, as highlighted in the table below. We would like to understand whether fixes for these issues are already planned. I… --- ## [Request that API keys restrict data to a measurement](https://community.influxdata.com/t/request-that-api-keys-restrict-data-to-a-measurement/57402)
**Author:** [@asmith](https://community.influxdata.com/u/asmith)\ **Replies:** 7\ **Last updated:** [November 24, 2025, 6:51pm UTC](https://community.influxdata.com/t/request-that-api-keys-restrict-data-to-a-measurement/57402 "2025-11-24T18:51:13Z")
We have data for multiple customers in our InfluxDB. Grafana is our viewer of choice. Grafana uses an API key. We’d like to ensure that a connection from Grafana can only read a certain measurement within our bucket. … --- ## [InfluxDB 3 Core self-signed certificate error with .NET SDK](https://community.influxdata.com/t/influxdb-3-core-self-signed-certificate-error-with-net-sdk/57282)
**Author:** [@li\_xuguang](https://community.influxdata.com/u/li_xuguang)\ **Replies:** 3\ **Last updated:** [June 18, 2025, 1:30am UTC](https://community.influxdata.com/t/influxdb-3-core-self-signed-certificate-error-with-net-sdk/57282 "2025-06-18T01:30:49Z")
Use InfluxDB3.Client SDK(.NET8) to query data from local InfluxDB 3 Core, get the SSL error like this . Configuration like below. Openssl openssl req -x509 -nodes -newkey rsa:2048 -keyout influxdb-selfsigned.key -… --- ## [GPG Key Change - Week of May 3rd. 2021](https://community.influxdata.com/t/gpg-key-change-week-of-may-3rd-2021/19772)
**Author:** [@tim.hall](https://community.influxdata.com/u/tim.hall)\ **Replies:** 14\ **Last updated:** [January 27, 2023, 6:09pm UTC](https://community.influxdata.com/t/gpg-key-change-week-of-may-3rd-2021/19772 "2023-01-27T18:09:23Z")
As some community members noticed earlier this week, there was a problem with the GPG Keys and signature validation associated with 1.x TICK stack components. There have been a number of digital supply chain attacks as … --- ## [InfluxDb 2.5: error 401 access denied when executing "influx server-config"](https://community.influxdata.com/t/influxdb-2-5-error-401-access-denied-when-executing-influx-server-config/27538)
**Author:** [@wgeithner](https://community.influxdata.com/u/wgeithner)\ **Replies:** 1\ **Last updated:** [November 28, 2022, 4:47pm UTC](https://community.influxdata.com/t/influxdb-2-5-error-401-access-denied-when-executing-influx-server-config/27538 "2022-11-28T16:47:51Z")
I recently upgraded a 1.8.10 installation to InfluxDB V2.5.1 on a Debian 9 machine. bolt-path, sqlite-path and engine-path have been re-directed to a custom path by modifying respective configuration files. Initially, t… --- ## [How to make sure the DB is connecting over private IP only](https://community.influxdata.com/t/how-to-make-sure-the-db-is-connecting-over-private-ip-only/26362)
**Author:** [@psp316r](https://community.influxdata.com/u/psp316r)\ **Replies:** 1\ **Last updated:** [September 6, 2022, 7:09pm UTC](https://community.influxdata.com/t/how-to-make-sure-the-db-is-connecting-over-private-ip-only/26362 "2022-09-06T19:09:17Z")
Hi, We are trying to use InfluxDB from the Azure Marketplace, how to make sure that INFLUX DB is Connecting on the Private IP only ? Thanks, Shashi. --- ## [Please can we have MFA to protect our data](https://community.influxdata.com/t/please-can-we-have-mfa-to-protect-our-data/25086)
**Author:** [@asmith](https://community.influxdata.com/u/asmith)\ **Replies:** 0\ **Last updated:** [May 18, 2022, 4:55pm UTC](https://community.influxdata.com/t/please-can-we-have-mfa-to-protect-our-data/25086 "2022-05-18T16:55:05Z")
We are using InfluxDB cloud for warehousing IoT data for our industrial machines that go all over the world. The more customers who want the solution, the more data we store. Customers like it = More data = Bigger bil… --- ## [Revoking client certificates in telegraf (influxdb\_listener)](https://community.influxdata.com/t/revoking-client-certificates-in-telegraf-influxdb-listener/22180)
**Author:** [@andoks](https://community.influxdata.com/u/andoks)\ **Replies:** 1\ **Last updated:** [October 22, 2021, 1:42pm UTC](https://community.influxdata.com/t/revoking-client-certificates-in-telegraf-influxdb-listener/22180 "2021-10-22T13:42:09Z")
Hi! I am using telegraf with the influxdb\_listener plugin to act as a secure reverse proxy that writes incoming data both to Influxdb (v2) and kapacitor (as per “Stream-style TICKscripts” in InfluxDB OSS 2.0 General Ava… --- ## [How to export / import tokens](https://community.influxdata.com/t/how-to-export-import-tokens/20593)
**Author:** [@szerwi](https://community.influxdata.com/u/szerwi)\ **Replies:** 5\ **Last updated:** [July 6, 2021, 5:50pm UTC](https://community.influxdata.com/t/how-to-export-import-tokens/20593 "2021-07-06T17:50:40Z")
Hi, Is it possible to export and import tokens in InfluxDB 2.0? If I need to move my database to another machine, is it possible to create the same tokens so all the read/write devices will still work without changing t…