CVE-2023-29194

Vitess is a database clustering system for horizontal scaling of MySQL. Users can either intentionally or inadvertently create a keyspace containing `/` characters such that from that point on, anyone who tries to view keyspaces from VTAdmin will receive an error. Trying to list all the keyspaces using `vtctldclient GetKeyspaces` will also return an error. Note that all other keyspaces can still be administered using the CLI (vtctldclient). This issue is fixed in version 16.0.1. As a workaround, delete the offending keyspace using a CLI client (vtctldclient).

• CWE-20
• CWE-703

• https://github.com/vitessio/vitess/commit/adf10196760ad0b3991a7aa7a8580a544e6ddf88Patch
• https://github.com/vitessio/vitess/commits/v0.16.1/Release Notes
• https://github.com/vitessio/vitess/security/advisories/GHSA-735r-hv67-g38fVendor Advisory
• https://github.com/vitessio/vitess/commit/adf10196760ad0b3991a7aa7a8580a544e6ddf88Patch
• https://github.com/vitessio/vitess/commits/v0.16.1/Release Notes
• https://github.com/vitessio/vitess/security/advisories/GHSA-735r-hv67-g38fVendor Advisory

Published

Apr 14, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-29187A Windows user with basic user authorization can exploit a D…6.7
• CVE-2023-29188SAP CRM WebClient UI - versions SAPSCORE 129, S4FND 102, S4F…5.4
• CVE-2023-29189SAP CRM (WebClient UI) - versions S4FND 102, 103, 104, 105, …5.4
• CVE-2023-2919The Tutor LMS plugin for WordPress is vulnerable to Cross-Si…4.3
• CVE-2023-29192SilverwareGames.io versions before 1.2.19 allow users with a…4.3
• CVE-2023-29193SpiceDB is an open source, Google Zanzibar-inspired, databas…7.5
• CVE-2023-29195Vitess is a database clustering system for horizontal scalin…4.3
• CVE-2023-29196Discourse is an open source platform for community discussio…6.1
• CVE-2023-29197guzzlehttp/psr7 is a PSR-7 HTTP message library implementati…7.5
• CVE-2023-29198Electron is a framework which lets you write cross-platform …8.5
• CVE-2023-29199There exists a vulnerability in source code transformer (exc…10
• CVE-2023-2920Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…