Repository navigation

Security vulnerability in DTStack/Taier: please review the report and fix #1222

Open

opened

on Oct 22, 2026

Hi maintainers,

I found a security vulnerability in DTStack/Taier (v1.5.0).
Please review the full report here and fix it:

https://hackmd.io/@hieuPenguinnn/taier-datasource-cross-tenant-idor

Thank you.
Reported by hieuPenguinnn (https://github.com/hieuPenguinnn)

zcswl7961
added a sub-issue on Nov 5, 2026
- DTStack Taier cross-tenant IDOR in the datasource manager API (credential disclosure and record deletion) #1223
zcswl7961 commented on Nov 5, 2026
zcswl7961
on Nov 5, 2026
Collaborator
Thanks for your report : https://hackmd.io/@hieuPenguinnn/taier-datasource-cross-tenant-idor
see the issue : #1223
zcswl7961 commented on Nov 5, 2026
zcswl7961
on Nov 5, 2026
Collaborator
the

Code logic design is not a problem.

to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Assignees

No one assigned

Labels

No labels

No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests