What’s Vulnerable › Vulnerabilities

CVE-2022-31011: TiDB authentication bypass vulnerability

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-05-31 · updated 2026-06-17
• Weakness: CWE-287

Description

TiDB is an open-source NewSQL database that supports Hybrid Transactional and Analytical Processing (HTAP) workloads. Under certain conditions, an attacker can construct malicious authentication requests to bypass the authentication process, resulting in privilege escalation or unauthorized access. Only users using TiDB 5.3.0 are affected by this vulnerability. TiDB version 5.3.1 contains a patch for this issue. Other mitigation strategies include turning off Security Enhanced Mode (SEM), disabling local login for non-root accounts, and ensuring that the same IP cannot be logged in as root and normal user at the same time.

Affected products

• pingcap tidb: 5.3.0

References

• https://github.com/pingcap/tidb/releases/tag/v5.3.1
• https://github.com/pingcap/tidb/security/advisories/GHSA-4whx-7p29-mq22
• https://github.com/pingcap/tidb/releases/tag/v5.3.1
• https://github.com/pingcap/tidb/security/advisories/GHSA-4whx-7p29-mq22

Get alerted when CVE-2022-31011 or the next vulnerability affects your stack