Exceeding the maximum number of spaces allowed by exploiting a Race Condition in the Workspace creation process

Summary

This vulnerability report describes a race condition in SingleStore's workspace creation process that allowed users to bypass the system's one-workspace-per-organization limit. By sending multiple parallel CreateWorkspace requests simultaneously to the backend.singlestore.com endpoint, an attacker could create multiple shared workspaces before the system performed its quota validation check. The researcher demonstrated this by exploiting the lack of server-level locking during workspace creation, which could lead to unauthorized resource consumption and potential denial-of-service through resource exhaustion. SingleStore validated the report, classified it as Low severity due to limited practical attack vectors and financial impact, and subsequently patched the underlying database transactional logic to prevent concurrent transactions from bypassing the workspace limit.