CVE-2026-62348

Deferred Deferred - Pending Action

Privilege Escalation in TDengine via KILL SSMIGRATE

Publication date: 2026-07-15

Last updated on: 2026-07-16

Assigner: GitHub, Inc.

Description

TDengine is a time-series database optimized for Internet of Things devices. Prior to 3.4.1.15, TDengine Enterprise allowed an authenticated low-privilege SQL user to run KILL SSMIGRATE <id> against an active shared-storage migration because mndProcessKillSsMigrateReq called mndKillSsMigrate while the intended MND_OPER_SSMIGRATE_DB privilege check was commented out. This issue is fixed in version 3.4.1.15.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-15

Last Modified

2026-07-16

Generated

2026-08-05

AI Q&A

2026-07-16

EPSS Evaluated

2026-08-03

NVD

CVE-2026-62348

EUVD

EUVD-2026-44769

Affected Vendors & Products

Vendor	Product	Version / Range
taosdata	tdengine	3.4.1.15
taosdata	tdengine	to 3.4.1.6 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

CVE-2026-62348 is a vulnerability in TDengine Enterprise versions 3.4.1.6 and earlier. It allows low-privilege authenticated users to interrupt shared-storage migrations by executing the KILL SSMIGRATE command without the required SSMIGRATE DATABASE privilege.

Detection Guidance

Check TDengine Enterprise versions prior to 3.4.1.15 for unauthorized KILL SSMIGRATE commands in logs. Monitor for suspicious SQL queries targeting shared-storage migrations. Review user privileges to ensure low-privilege users cannot execute migration-related commands.

Impact Analysis

An attacker could disrupt database data movement in shared-storage deployments by terminating active migration tasks. This may cause data inconsistencies or operational delays in environments relying on these migrations.

Compliance Impact

This vulnerability could impact compliance by disrupting data integrity during migrations, potentially violating requirements for data availability and protection in GDPR or HIPAA. Unauthorized interruptions may lead to incomplete data transfers or corruption, affecting regulatory adherence.

Mitigation Strategies

Upgrade TDengine Enterprise to version 3.4.1.15 or later to restore the missing privilege check. Ensure all users have only necessary privileges and review SQL query logs for unauthorized KILL SSMIGRATE commands.

Hi! I’m here to help you understand CVE-2026-62348. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70