A missing authorization check in TDengine Enterprise allowed an authenticated user with low privileges to execute the KILL SSMIGRATE <id> command against an active shared‑storage migration. The flaw originates from the mndProcessKillSsMigrateReq routine calling mndKillSsMigrate without enforcing the intended MND_OPER_SSMIGRATE_DB privilege. As a result, a malicious actor can terminate an ongoing migration, potentially leading to data inconsistency or loss of work and interrupting critical operations. The vulnerability is a privilege‑escalation‑to‑denial‑of‑service flaw (CWE‑862).

The affected product is taosdata TDengine, all releases prior to version 3.4.1.15. The issue is fixed in 3.4.1.15 and later releases.

The CVSS score of 5.4 indicates moderate severity, and the EPSS score of less than 1% suggests a low probability of exploitation at the time of reporting. The vulnerability is not listed in CISA KEV. Attack likely requires the attacker to log in to the database and issue the KILL SSMIGRATE command, implying a network or local access to the database with low‑privilege credentials as the attack vector.