Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-63752

SurrealDB before 3.1.0 RELATE Statement Record Overwrite

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

SurrealDB before 3.1.0 contains an authorization bypass vulnerability in the RELATE statement that allows authenticated users with CREATE permission to overwrite existing edge records without UPDATE permission. Attackers can issue a RELATE statement with a SET id clause pointing to an existing edge id, causing the storage layer to silently overwrite the target record instead of rejecting the operation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

surrealdb surrealdb

Default version status: unaffected

  • 0 to < 3.1.0affected
  • 3.1.0unaffected
pkg:cargo/surrealdb

References