CVE-2026-109341

7.1 HIGHpublic exploit available

Published 2026-10-12 · Updated 2026-10-12

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

SurrealDB before 3.3.0 contains an authorization bypass vulnerability that allows callers with table-level write permission to read SELECT-restricted fields by resolving JSON Patch pointers against the unreduced record. Attackers can use PATCH copy or move operations to copy hidden fields into readable destinations, or abuse test mismatch errors as a disclosure oracle.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Weaknesses

CWE-200

Public exploit & PoC references

https://github.com/surrealdb/surrealdb/security/advisories/GHSA-h2c3-549c-gjpr

All references

https://github.com/surrealdb/surrealdb/security/advisories/GHSA-h2c3-549c-gjpr
https://www.vulncheck.com/advisories/surrealdb-before-3.3.0-field-permission-bypass-via-patch-copy-move-test-operations

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

MEDIUMCVE-2026-100149PoC
HIGHCVE-2026-100241
HIGHCVE-2026-100244
MEDIUMCVE-2026-100286
UNSCOREDCVE-2026-100377
UNSCOREDCVE-2026-100379PoC
UNSCOREDCVE-2026-100406PoC
MEDIUMCVE-2026-100418PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.