SingleStore · Report #3226838
Exceeding the limit of Workspaces via Race Condition
Validstatus
mediumseverity
62upvotes
6 Oct 2025disclosed
Summary
Reporter 4x4 discovered a race condition vulnerability in backend.singlestore.com that allowed free-tier users to bypass the 5-workspace limit by sending multiple simultaneous CreateWorkspace requests, enabling unlimited workspace creation and potential resource abuse. This issue has since been patched by SingleStore as of October 3rd, 2025.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.