PingCAP Confirms Unauthorized Access to Internal Systems as TiDB Security Flaws Surface

A security researcher disclosed serious flaws in PingCAP's TiDB cloud products, including a four-year-old root-privilege vulnerability and exposed credentials in Jira tickets, with claims that TiDB data has been leaked. PingCAP confirmed unauthorized access to some internal systems, saying it has contained the incident and found no evidence that user data stored in TiDB was affected.

2026-10-21 ~ 2026-10-21 · 3 related posts

• PingCAP confirms breach of internal systems as leaked TiDB data surfaces online — SumitGup · 2026-10-21
• TiDB leak report: root-level org takeover bug left unfixed for 4 years, creds in Jira — arpit_bhayani · 2026-10-21
• TiDB leak: PingCAP documented its own multi-tenant isolation flaws back in 2022 — SumitGup · 2026-10-21