Lul this is a goodie

PingCAP’s security team wrote down exactly what was wrong with the multi-tenant isolation of their own product in 2022. SECURITY-22, from the internal security tracker, in their own words:

Summary: “The root password of the cluster can be reset unconditionally”

“All roles of the organization (including: owner, audit admin, billing admin, member) can unconditionally reset the root password of all clusters in the organization. This will cause all users in the organization to reset the cluster root password, and then users can connect to the cluster as root, modify the cluster state, and access cluster data.”

“Because the root account of the cluster has extremely high privileges, this will lead to a great security risk.”