Bug bounty program · HackerOne
SingleStore
Most upvoted reports10
- #3329361Valid2FA bypass possible on https://authsvc.singlestore.comSingleStore · Authentication · 2025 · Medium–96votes
- #3219944ValidIDOR - Scheduled data leak to other accounts By "projectID"SingleStore · Input Validation and Logic · 2025 · Medium–77votes
- #3221185ValidExceed the maximum number of subscribers using Race ConditionSingleStore · Input Validation and Logic · 2025 · Low–70votes
- #3226838ValidExceeding the limit of Workspaces via Race ConditionSingleStore · Input Validation and Logic · 2025 · Medium–62votes
- #3780695ValidSELECT ... INTO OUTFILE does not enforce the FILE WRITE privilege unprivileged arbitrary file write on the serverSingleStore · Access Control · 2026 · High–50votes
- #3353057ValidInsecure Direct Object Reference (IDOR) allows creating folders.SingleStore · Insecure Direct Object Reference · 2026 · Low–39votes
- #3295500ValidExceeding the maximum number of spaces allowed by exploiting a Race Condition in the Workspace creation processSingleStore · Input Validation and Logic · 2026 · Low–35votes
- #3353035ValidDelete any folder for any user within the organizationSingleStore · Insecure Direct Object Reference · 2026 · Low–35votes
- #3353000ValidPrivilege Escalation – Access to the Alert Subscribers page for users with low privilegesSingleStore · Access Control · 2026 · Low–26votes
- #3384615ValidInsufficient checks in the file path parameter allow writing to unauthorized directoriesSingleStore · File and Path Handling · 2026 · Low–12votes
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.