{"schema_version":1,"title":"Surrealdb vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 31 vulnerabilities in Surrealdb: 0 in the last 7 days and 18 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-121423, was published on 3 November 2026. 17 vulnerabilities in the last four weeks, up 1600% on the four before (1).","url":"https://junglewise.ai/threats/technologies/surrealdb-surrealdb","json_url":"https://junglewise.ai/threats/technologies/surrealdb-surrealdb.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/surrealdb-surrealdb","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":7,"all_time":31,"critical":1,"exploited":0,"last_7_days":0,"last_30_days":6,"last_90_days":18,"last_365_days":31},"latest":[{"cve":"CVE-2026-121423","cvss":6.5,"slug":"cve-2026-121423-surrealdb-before-3-3-0-contains-an-unbounded-recursion","title":"SurrealDB unbounded recursion in value serialization","severity":"medium","exploited":false,"published_at":"2026-11-03T15:17:32.7+00:00","url":"https://junglewise.ai/threats/cve-2026-121423-surrealdb-before-3-3-0-contains-an-unbounded-recursion"},{"cve":"CVE-2026-121422","cvss":4.1,"slug":"cve-2026-121422-surrealdb-from-3-1-0-before-3-3-0-contains-a-server-side-request","title":"SurrealDB server-side request forgery in JWKS URL validation","severity":"medium","exploited":false,"published_at":"2026-11-03T15:17:32.527+00:00","url":"https://junglewise.ai/threats/cve-2026-121422-surrealdb-from-3-1-0-before-3-3-0-contains-a-server-side-request"},{"cve":"CVE-2026-121421","cvss":4.3,"slug":"cve-2026-121421-surrealdb-3-1-0-before-3-3-0-contains-a-server-side-request","title":"SurrealDB server-side request forgery in network deny rules","severity":"medium","exploited":false,"published_at":"2026-11-03T15:17:32.34+00:00","url":"https://junglewise.ai/threats/cve-2026-121421-surrealdb-3-1-0-before-3-3-0-contains-a-server-side-request"},{"cve":"CVE-2026-121419","cvss":8.1,"slug":"cve-2026-121419-surrealdb-from-3-1-0-before-3-3-0-contains-an-improper","title":"SurrealDB MCP session hijack via BoundSubject fingerprint collision","severity":"high","exploited":false,"published_at":"2026-11-03T15:17:31.953+00:00","url":"https://junglewise.ai/threats/cve-2026-121419-surrealdb-from-3-1-0-before-3-3-0-contains-an-improper"},{"cve":"CVE-2026-121418","cvss":4.3,"slug":"cve-2026-121418-surrealdb-from-3-1-0-before-3-3-0-contains-an-incorrect","title":"SurrealDB authorization bypass via streaming index planner","severity":"medium","exploited":false,"published_at":"2026-11-03T15:17:31.753+00:00","url":"https://junglewise.ai/threats/cve-2026-121418-surrealdb-from-3-1-0-before-3-3-0-contains-an-incorrect"},{"cve":"CVE-2026-121416","cvss":7.1,"slug":"cve-2026-121416-surrealdb-2-0-0-before-3-3-1-does-not-enforce-deny-funcs","title":"SurrealDB deny-funcs capability bypass via method-style invocations","severity":"high","exploited":false,"published_at":"2026-11-03T15:17:31.367+00:00","url":"https://junglewise.ai/threats/cve-2026-121416-surrealdb-2-0-0-before-3-3-1-does-not-enforce-deny-funcs"},{"cve":"CVE-2026-109343","cvss":8.1,"epss":0.0026,"slug":"cve-2026-109343-surrealdb-before-3-3-0-allows-cross-tenant-access-because-the","title":"SurrealDB authorization bypass in USE statement","severity":"high","exploited":false,"published_at":"2026-10-12T17:17:30.89+00:00","url":"https://junglewise.ai/threats/cve-2026-109343-surrealdb-before-3-3-0-allows-cross-tenant-access-because-the"},{"cve":"CVE-2026-109342","cvss":5.4,"epss":0.0028,"slug":"cve-2026-109342-surrealdb-from-3-0-0-before-3-3-0-contains-a-missing","title":"SurrealDB missing authentication in revoke RPC method","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:30.72+00:00","url":"https://junglewise.ai/threats/cve-2026-109342-surrealdb-from-3-0-0-before-3-3-0-contains-a-missing"},{"cve":"CVE-2026-109341","cvss":7.1,"epss":0.0026,"slug":"cve-2026-109341-surrealdb-before-3-3-0-contains-an-authorization-bypass","title":"SurrealDB authorization bypass in PATCH operations","severity":"high","exploited":false,"published_at":"2026-10-12T17:17:30.55+00:00","url":"https://junglewise.ai/threats/cve-2026-109341-surrealdb-before-3-3-0-contains-an-authorization-bypass"},{"cve":"CVE-2026-109340","cvss":5.4,"epss":0.0024,"slug":"cve-2026-109340-surrealdb-from-3-1-0-before-3-3-0-contains-an-authorization","title":"SurrealDB authorization bypass in graph edge deletion via CASCADE","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:30.38+00:00","url":"https://junglewise.ai/threats/cve-2026-109340-surrealdb-from-3-1-0-before-3-3-0-contains-an-authorization"},{"cve":"CVE-2026-109339","cvss":4.9,"epss":0.0038,"slug":"cve-2026-109339-surrealdb-3-1-0-before-3-3-0-lets-surrealism-modules-exhaust","title":"SurrealDB Surrealism module memory exhaustion via unbounded output buffering","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:30.233+00:00","url":"https://junglewise.ai/threats/cve-2026-109339-surrealdb-3-1-0-before-3-3-0-lets-surrealism-modules-exhaust"},{"cve":"CVE-2026-109338","cvss":6.5,"epss":0.0031,"slug":"cve-2026-109338-surrealdb-before-3-3-0-contains-a-denial-of-service","title":"SurrealDB denial of service via non-ASCII header values","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:30.06+00:00","url":"https://junglewise.ai/threats/cve-2026-109338-surrealdb-before-3-3-0-contains-a-denial-of-service"},{"cve":"CVE-2026-109337","cvss":4.3,"epss":0.0024,"slug":"cve-2026-109337-surrealdb-before-3-3-0-contains-an-authorization-bypass","title":"SurrealDB field-level SELECT permission bypass in LIVE queries","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:29.887+00:00","url":"https://junglewise.ai/threats/cve-2026-109337-surrealdb-before-3-3-0-contains-an-authorization-bypass"},{"cve":"CVE-2026-109336","cvss":4.3,"epss":0.0022,"slug":"cve-2026-109336-surrealdb-before-3-3-0-contains-an-authorization-bypass","title":"SurrealDB field-level SELECT authorization bypass in LIVE queries","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:29.71+00:00","url":"https://junglewise.ai/threats/cve-2026-109336-surrealdb-before-3-3-0-contains-an-authorization-bypass"},{"cve":"CVE-2026-109335","cvss":6.5,"epss":0.003,"slug":"cve-2026-109335-surrealdb-from-3-0-0-before-3-3-0-contains-an-information","title":"SurrealDB information disclosure via COMPUTED fields","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:29.533+00:00","url":"https://junglewise.ai/threats/cve-2026-109335-surrealdb-from-3-0-0-before-3-3-0-contains-an-information"},{"cve":"CVE-2026-109334","cvss":8.1,"epss":0.0026,"slug":"cve-2026-109334-surrealdb-before-3-3-0-does-not-check-the-caller-selected","title":"SurrealDB authorization bypass via namespace/database context","severity":"high","exploited":false,"published_at":"2026-10-12T17:17:29.363+00:00","url":"https://junglewise.ai/threats/cve-2026-109334-surrealdb-before-3-3-0-does-not-check-the-caller-selected"},{"cve":"CVE-2026-109333","cvss":6.5,"epss":0.0029,"slug":"cve-2026-109333-surrealdb-from-3-0-0-before-3-3-0-contains-an-authorization","title":"SurrealDB authorization bypass in FETCH query resolution","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:29.19+00:00","url":"https://junglewise.ai/threats/cve-2026-109333-surrealdb-from-3-0-0-before-3-3-0-contains-an-authorization"},{"cve":"CVE-2026-102876","cvss":8.1,"slug":"cve-2026-102876-surrealdb-before-3-3-0-contains-an-authorization-bypass-in-http","title":"SurrealDB authorization bypass in HTTP session construction","severity":"high","exploited":false,"published_at":"2026-09-29T20:17:18.23+00:00","url":"https://junglewise.ai/threats/cve-2026-102876-surrealdb-before-3-3-0-contains-an-authorization-bypass-in-http"},{"cve":"CVE-2026-63763","cvss":4,"epss":0.005,"slug":"cve-2026-63763-surrealdb-privilege-escalation-in-futures-and-functions","title":"SurrealDB privilege escalation in futures and functions","severity":"medium","exploited":false,"published_at":"2026-07-20T12:19:46.623+00:00","url":"https://junglewise.ai/threats/cve-2026-63763-surrealdb-privilege-escalation-in-futures-and-functions"},{"cve":"CVE-2026-63762","cvss":4,"epss":0.0045,"slug":"cve-2026-63762-surrealdb-denial-of-service-in-javascript-scripting-engine","title":"SurrealDB denial of service in JavaScript scripting engine","severity":"medium","exploited":false,"published_at":"2026-07-20T12:19:46.477+00:00","url":"https://junglewise.ai/threats/cve-2026-63762-surrealdb-denial-of-service-in-javascript-scripting-engine"},{"cve":"CVE-2025-71398","cvss":4,"epss":0.0033,"slug":"cve-2025-71398-surrealdb-ssrf-via-http-redirect-bypass-in-http-functions","title":"SurrealDB SSRF via HTTP redirect bypass in http functions","severity":"medium","exploited":false,"published_at":"2026-07-18T14:17:11.347+00:00","url":"https://junglewise.ai/threats/cve-2025-71398-surrealdb-ssrf-via-http-redirect-bypass-in-http-functions"},{"cve":"CVE-2025-71397","cvss":4,"epss":0.0055,"slug":"cve-2025-71397-surrealdb-denial-of-service-via-nested-for-loops-in-custom","title":"SurrealDB denial of service via nested FOR loops in custom functions","severity":"medium","exploited":false,"published_at":"2026-07-18T14:17:11.22+00:00","url":"https://junglewise.ai/threats/cve-2025-71397-surrealdb-denial-of-service-via-nested-for-loops-in-custom"},{"cve":"CVE-2025-71396","cvss":4,"epss":0.0055,"slug":"cve-2025-71396-surrealdb-denial-of-service-via-embedded-javascript-scripting","title":"SurrealDB denial of service via embedded JavaScript scripting","severity":"medium","exploited":false,"published_at":"2026-07-18T14:17:11.087+00:00","url":"https://junglewise.ai/threats/cve-2025-71396-surrealdb-denial-of-service-via-embedded-javascript-scripting"},{"cve":"CVE-2025-71395","cvss":4,"epss":0.0045,"slug":"cve-2025-71395-surrealdb-memory-exhaustion-in-string-replace-function","title":"SurrealDB memory exhaustion in string::replace function","severity":"medium","exploited":false,"published_at":"2026-07-18T14:17:10.963+00:00","url":"https://junglewise.ai/threats/cve-2025-71395-surrealdb-memory-exhaustion-in-string-replace-function"},{"cve":"CVE-2025-71394","cvss":4,"epss":0.0037,"slug":"cve-2025-71394-surrealdb-local-file-read-in-define-analyzer-statement","title":"SurrealDB local file read in DEFINE ANALYZER statement","severity":"medium","exploited":false,"published_at":"2026-07-18T14:17:10.837+00:00","url":"https://junglewise.ai/threats/cve-2025-71394-surrealdb-local-file-read-in-define-analyzer-statement"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":11},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":6},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Surrealdb-Core","slug":"surrealdb-core","vulnerabilities":13,"url":"https://junglewise.ai/threats/technologies/surrealdb-core"}],"technology":{"hub":true,"name":"Surrealdb","slug":"surrealdb-surrealdb","vendor":{"hub":true,"name":"SurrealDB","slug":"surrealdb","url":"https://junglewise.ai/threats/vendors/surrealdb"},"aliases":[],"category":"database","homepage":"https://surrealdb.com","description":"Multi-model database designed for cloud-native applications with real-time capabilities.","url":"https://junglewise.ai/threats/technologies/surrealdb-surrealdb"},"most_severe":[{"cve":"CVE-2025-71392","cvss":4,"epss":0.0044,"slug":"cve-2025-71392-surrealdb-surrealql-injection-in-command-line-export","title":"SurrealDB SurrealQL injection in command-line export","severity":"critical","exploited":false,"published_at":"2026-07-18T14:17:10.58+00:00","url":"https://junglewise.ai/threats/cve-2025-71392-surrealdb-surrealql-injection-in-command-line-export"},{"cve":"CVE-2024-58362","cvss":8.8,"epss":0.0064,"slug":"cve-2024-58362-surrealdb-query-injection-in-rpc-api-signin-and-signup-operations","title":"SurrealDB query injection in RPC API signin and signup operations","severity":"high","exploited":false,"published_at":"2026-07-18T14:17:09.047+00:00","url":"https://junglewise.ai/threats/cve-2024-58362-surrealdb-query-injection-in-rpc-api-signin-and-signup-operations"},{"cve":"CVE-2026-109343","cvss":8.1,"epss":0.0026,"slug":"cve-2026-109343-surrealdb-before-3-3-0-allows-cross-tenant-access-because-the","title":"SurrealDB authorization bypass in USE statement","severity":"high","exploited":false,"published_at":"2026-10-12T17:17:30.89+00:00","url":"https://junglewise.ai/threats/cve-2026-109343-surrealdb-before-3-3-0-allows-cross-tenant-access-because-the"},{"cve":"CVE-2026-109334","cvss":8.1,"epss":0.0026,"slug":"cve-2026-109334-surrealdb-before-3-3-0-does-not-check-the-caller-selected","title":"SurrealDB authorization bypass via namespace/database context","severity":"high","exploited":false,"published_at":"2026-10-12T17:17:29.363+00:00","url":"https://junglewise.ai/threats/cve-2026-109334-surrealdb-before-3-3-0-does-not-check-the-caller-selected"},{"cve":"CVE-2026-121419","cvss":8.1,"slug":"cve-2026-121419-surrealdb-from-3-1-0-before-3-3-0-contains-an-improper","title":"SurrealDB MCP session hijack via BoundSubject fingerprint collision","severity":"high","exploited":false,"published_at":"2026-11-03T15:17:31.953+00:00","url":"https://junglewise.ai/threats/cve-2026-121419-surrealdb-from-3-1-0-before-3-3-0-contains-an-improper"},{"cve":"CVE-2026-102876","cvss":8.1,"slug":"cve-2026-102876-surrealdb-before-3-3-0-contains-an-authorization-bypass-in-http","title":"SurrealDB authorization bypass in HTTP session construction","severity":"high","exploited":false,"published_at":"2026-09-29T20:17:18.23+00:00","url":"https://junglewise.ai/threats/cve-2026-102876-surrealdb-before-3-3-0-contains-an-authorization-bypass-in-http"},{"cve":"CVE-2026-109341","cvss":7.1,"epss":0.0026,"slug":"cve-2026-109341-surrealdb-before-3-3-0-contains-an-authorization-bypass","title":"SurrealDB authorization bypass in PATCH operations","severity":"high","exploited":false,"published_at":"2026-10-12T17:17:30.55+00:00","url":"https://junglewise.ai/threats/cve-2026-109341-surrealdb-before-3-3-0-contains-an-authorization-bypass"},{"cve":"CVE-2026-121416","cvss":7.1,"slug":"cve-2026-121416-surrealdb-2-0-0-before-3-3-1-does-not-enforce-deny-funcs","title":"SurrealDB deny-funcs capability bypass via method-style invocations","severity":"high","exploited":false,"published_at":"2026-11-03T15:17:31.367+00:00","url":"https://junglewise.ai/threats/cve-2026-121416-surrealdb-2-0-0-before-3-3-1-does-not-enforce-deny-funcs"},{"cve":"CVE-2026-109338","cvss":6.5,"epss":0.0031,"slug":"cve-2026-109338-surrealdb-before-3-3-0-contains-a-denial-of-service","title":"SurrealDB denial of service via non-ASCII header values","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:30.06+00:00","url":"https://junglewise.ai/threats/cve-2026-109338-surrealdb-before-3-3-0-contains-a-denial-of-service"},{"cve":"CVE-2026-109335","cvss":6.5,"epss":0.003,"slug":"cve-2026-109335-surrealdb-from-3-0-0-before-3-3-0-contains-an-information","title":"SurrealDB information disclosure via COMPUTED fields","severity":"medium","exploited":false,"published_at":"2026-10-12T17:17:29.533+00:00","url":"https://junglewise.ai/threats/cve-2026-109335-surrealdb-from-3-0-0-before-3-3-0-contains-an-information"}],"generated_at":"2026-11-12T03:07:00.164048+00:00"}