Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2026-62355

TDengine: Standard User permission unexpect

Description

TDengine is an open source, time-series database optimized for Internet of Things devices. Prior to 3.4.1.15, a Data Reader admin_user on a TDengine Cloud DB instance could run create udf even though standard users should have read-only permissions for non-database objects and show dnodes and create user were denied. This issue is fixed in version 3.4.1.15.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

taosdata TDengine

  • < 3.4.1.15affected

References