CVE-2026-63739
Last modified
CVE-2026-63739 is a high-severity vulnerability rated 8.3/10 on the CVSS scale. SurrealDB before 3.1.5 contains an arbitrary file read vulnerability in the DEFINE ANALYZER mapper filter that allows database users with EDITOR or OWNER roles to read files accessible to the SurrealDB process. Attackers can specify arbitrary file paths in the mapper filter and retrieve file contents through query error messages when the SURREAL_FILE_ALLOWLIST is empty or not configured.. EPSS estimates a 0.34% chance of exploitation in the next 30 days.
Description
SurrealDB before 3.1.5 contains an arbitrary file read vulnerability in the DEFINE ANALYZER mapper filter that allows database users with EDITOR or OWNER roles to read files accessible to the SurrealDB process. Attackers can specify arbitrary file paths in the mapper filter and retrieve file contents through query error messages when the SURREAL_FILE_ALLOWLIST is empty or not configured.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Surrealdb | Surrealdb | < 3.1.5 |
References
- https://github.com/surrealdb/surrealdb/security/advisories/GHSA-cc8f-fcx3-gpjrVendor Advisory, Mitigation
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-63739?
How severe is CVE-2026-63739?
How do I fix CVE-2026-63739?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-63733SurrealDB versions before 3.2.0 contain a permissions bypass…6.5
- CVE-2026-63734SurrealDB versions before 3.2.0 contain a denial of service …6.9
- CVE-2026-63735SurrealDB versions before 3.2.0 fail to validate namespace a…8.6
- CVE-2026-63736SurrealDB before 3.2.0 contains a server-side request forger…5.1
- CVE-2026-63737SurrealDB versions before 3.1.5 contain a denial of service …7.1
- CVE-2026-63738SurrealDB versions 3.1.0 before 3.1.5 fail to enforce field-…5.3
- CVE-2026-6374Use of Hard-coded Credentials vulnerability in Zyxel Network…7.3
- CVE-2026-63740SurrealDB versions before 3.1.4 fail to properly enforce SEL…7.1
- CVE-2026-63741SurrealDB versions before 3.1.0 fail to validate DEFINE NAME…6.9
- CVE-2026-63742SurrealDB versions before 3.1.0 contain a field-level SELECT…5.3
- CVE-2026-63743SurrealDB before 3.1.0 contains a capability bypass vulnerab…6.4
- CVE-2026-63744SurrealDB before 3.1.5 contains a server-side request forger…5.1
Are you affected by CVE-2026-63739?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST