{"id":"EUVD-2026-45917","enisaUuid":"40270878-059a-34e3-96bc-deb3fa874368","description":"SurrealDB versions before 3.1.0 fail to enforce table SELECT permissions when traversing graph edges or back-references. Authenticated users can read records from any table reachable through graph edges regardless of the target table\u0027s PERMISSIONS FOR select clause.","datePublished":"Jul 20, 2026, 12:04:39 PM","dateUpdated":"Oct 8, 2026, 3:23:47 PM","baseScore":7.1,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-vjjx-rfw4-rmfc\nhttps://www.vulncheck.com/advisories/surrealdb-before-permission-bypass-via-graph-traversal\n","aliases":"CVE-2026-63746\nGHSA-4q5r-gwcx-24m9\n","assigner":"VulnCheck","epss":0.4,"enisaIdProduct":[{"id":"9a351aad-50f9-3649-99c1-2ce75e4c6d61","product":{"name":"surrealdb","vendor":{"name":"surrealdb"}},"product_version":"0 \u003c3.1.0"}],"enisaIdVendor":[{"id":"f12f5d1c-9ee3-305c-9b4c-ac7c067ace5e","vendor":{"name":"surrealdb"}}],"enisaIdVulnerability":[{"id":"cdba7579-9e58-3402-a6ea-2dd12b8200c0","vulnerability":{"id":"CVE-2026-63746","description":"SurrealDB versions before 3.1.0 fail to enforce table SELECT permissions when traversing graph edges or back-references. Authenticated users can read records from any table reachable through graph edges regardless of the target table\u0027s PERMISSIONS FOR select clause.","datePublished":"Jul 20, 2026, 12:04:39 PM","dateUpdated":"Oct 8, 2026, 3:23:47 PM","status":"PUBLISHED","baseScore":7.1,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-vjjx-rfw4-rmfc\nhttps://www.vulncheck.com/advisories/surrealdb-before-permission-bypass-via-graph-traversal\n","enisa_id":"EUVD-2026-45917\n","assigner":"VulnCheck","epss":0.4,"dataProcessed":"Nov 5, 2026, 7:16:05 AM","vulnerabilityProduct":[{"id":"7aa72e01-8b14-309a-9789-e6cd0bf31bd1","product":{"name":"surrealdb","vendor":{"name":"surrealdb"}},"product_version":"0 \u003c3.1.0"}],"vulnerabilityVendor":[{"id":"9b852801-4afb-3494-91e0-f7a580a9a164","vendor":{"name":"surrealdb"}}]}},{"id":"ef1e7795-b073-3e06-b791-82c106edd95b","vulnerability":{"id":"GHSA-4q5r-gwcx-24m9","description":"Duplicate Advisory: SurrealDB: Graph traversal bypasses table SELECT permissions","datePublished":"Jul 20, 2026, 12:33:09 PM","dateUpdated":"Sep 4, 2026, 8:12:37 PM","baseScore":0.0,"references":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-vjjx-rfw4-rmfc\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-63746\nhttps://www.vulncheck.com/advisories/surrealdb-before-permission-bypass-via-graph-traversal\n","enisa_id":"EUVD-2026-45917\n","aliases":"GHSA-4q5r-gwcx-24m9\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:02:28 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}