🎯 New Report #3295500: Exceeding the maximum number of spaces allowed by exploiting a Race Condition in the Workspace creation process
🔺Severity: Low
👽 Reporter: bl4ck-
⭐️ Reputation: 907
🛠 State: resolved
💼 Team: SingleStore
💵 Bounty: null
🕐 Submitted: 2025-08-12
⏰ Disclosed: 2026-07-01 17:42:23
📝 Summary: A race condition vulnerability was discovered in the workspace creation process of SingleStore. The vulnerability allowed users to bypass the limit of one workspace per organization by sending multiple parallel requests to create workspaces. The lack of server-level locking during the creation process enabled concurrent transactions to bypass the workspace limit. The vulnerability was validated and classified as low severity due to limited practical attack vectors and financial impact. The underlying database transactional logic was subsequently patched to prevent this issue.
📂 Report JSON File: 3295500
@hackeronereports