CVE-2026-63748
Last modified
CVE-2026-63748 is a medium-severity vulnerability rated 5.3/10 on the CVSS scale. SurrealDB versions before 3.1.0 contain an information disclosure vulnerability where authenticated users with UPDATE access can read field values hidden by field-level SELECT permissions through error messages. Attackers can trigger arithmetic or extend operations on hidden fields to embed raw operand values in error responses, bypassing field-level access controls.. EPSS estimates a 0.20% chance of exploitation in the next 30 days.
Description
SurrealDB versions before 3.1.0 contain an information disclosure vulnerability where authenticated users with UPDATE access can read field values hidden by field-level SELECT permissions through error messages. Attackers can trigger arithmetic or extend operations on hidden fields to embed raw operand values in error responses, bypassing field-level access controls.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Surrealdb | Surrealdb | < 3.1.0 |
References
- https://github.com/surrealdb/surrealdb/security/advisories/GHSA-6g9v-7gq3-p2c6Vendor Advisory, Mitigation
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-63748?
How severe is CVE-2026-63748?
How do I fix CVE-2026-63748?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-63742SurrealDB versions before 3.1.0 contain a field-level SELECT…5.3
- CVE-2026-63743SurrealDB before 3.1.0 contains a capability bypass vulnerab…6.4
- CVE-2026-63744SurrealDB before 3.1.5 contains a server-side request forger…5.1
- CVE-2026-63745SurrealDB versions before 3.1.0 contain an authorization byp…5.4
- CVE-2026-63746SurrealDB versions before 3.1.0 fail to enforce table SELECT…7.1
- CVE-2026-63747SurrealDB versions before 3.1.0 contain a denial of service …8.7
- CVE-2026-63749SurrealDB versions before 3.1.0 contain an authentication by…5.3
- CVE-2026-6375A vulnerability in SpiceJet’s booking API allows unauthentic…8.7
- CVE-2026-63750SurrealDB versions before 3.1.0 fail to apply the SURREAL_WE…7.5
- CVE-2026-63751SurrealDB versions before 3.1.0 contain a field-level permis…5.3
- CVE-2026-63752SurrealDB before 3.1.0 contains an authorization bypass vuln…5.3
- CVE-2026-63753SurrealDB before 3.1.0 fails to refresh authentication state…5.3
Are you affected by CVE-2026-63748?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST