CVE-2026-62348 Details
Description
TDengine is a time-series database optimized for Internet of Things devices. Prior to 3.4.1.15, TDengine Enterprise allowed an authenticated low-privilege SQL user to run KILL SSMIGRATE <id> against an active shared-storage migration because mndProcessKillSsMigrateReq called mndKillSsMigrate while the intended MND_OPER_SSMIGRATE_DB privilege check was commented out. This issue is fixed in version 3.4.1.15.
A vulnerability in TDengine Enterprise versions through 3.4.1.14 allows authenticated low-privilege SQL users to interrupt active shared-storage migrations. The issue arises because the KILL SSMIGRATE command can be executed without the necessary privileges, as the required authorization check is commented out. This vulnerability could disrupt database migration processes and availability in shared-storage environments.
To address this vulnerability, restore the MND_OPER_SSMIGRATE_DB privilege check in the mndProcessKillSsMigrateReq function before calling mndKillSsMigrate. This will ensure that the KILL SSMIGRATE command requires the same authorization as the SSMIGRATE DATABASE operation.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jul 15, 2026CISA-ADP
Assessed Jul 16, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/taosdata/TDengine/security/advisories/GHSA-67g2-ffwr-7x9h | CISA-ADP | AdvisoryExploitRemedyVendor |
| https://github.com/taosdata/TDengine/security/advisories/GHSA-67g2-ffwr-7x9h | [email protected] | AdvisoryExploitRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-862 | Missing Authorization | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| TDengine | <= 3.4.1.14 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 16, 2026 | CVE Modified | CISA-ADP |
| Jul 15, 2026 | New CVE Received | [email protected] |