{"id":"EUVD-2026-45923","enisaUuid":"3d35140d-c37d-3792-a7b1-80f0f59845ec","description":"SurrealDB before 3.1.0 contains an authorization bypass vulnerability in the RELATE statement that allows authenticated users with CREATE permission to overwrite existing edge records without UPDATE permission. Attackers can issue a RELATE statement with a SET id clause pointing to an existing edge id, causing the storage layer to silently overwrite the target record instead of rejecting the operation.","datePublished":"Jul 20, 2026, 12:04:43 PM","dateUpdated":"Oct 8, 2026, 3:23:49 PM","baseScore":5.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-f82j-v89j-mf86\nhttps://www.vulncheck.com/advisories/surrealdb-before-relate-statement-record-overwrite\n","aliases":"CVE-2026-63752\nGHSA-j8qv-6jr5-7pcx\n","assigner":"VulnCheck","epss":0.28,"enisaIdProduct":[{"id":"05221d65-c97f-3b46-ad8d-a37b0544ead7","product":{"name":"surrealdb","vendor":{"name":"surrealdb"}},"product_version":"0 \u003c3.1.0"}],"enisaIdVendor":[{"id":"87294848-ebc1-3226-afb7-e07b74b36080","vendor":{"name":"surrealdb"}}],"enisaIdVulnerability":[{"id":"7f45b064-9e38-3919-b416-d1308219d41d","vulnerability":{"id":"GHSA-j8qv-6jr5-7pcx","description":"SurrealDB before 3.1.0 contains an authorization bypass vulnerability in the RELATE statement that allows authenticated users with CREATE permission to overwrite existing edge records without UPDATE permission. Attackers can issue a RELATE statement with a SET id clause pointing to an existing edge id, causing the storage layer to silently overwrite the target record instead of rejecting the operation.","datePublished":"Jul 20, 2026, 12:33:10 PM","dateUpdated":"Jul 20, 2026, 12:33:10 PM","baseScore":0.0,"references":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-f82j-v89j-mf86\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-63752\nhttps://www.vulncheck.com/advisories/surrealdb-before-relate-statement-record-overwrite\n","enisa_id":"EUVD-2026-45923\n","aliases":"GHSA-j8qv-6jr5-7pcx\nCVE-2026-63752\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:02:28 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"c32e1792-b748-39d2-9597-1ed2f34d20b7","vulnerability":{"id":"CVE-2026-63752","description":"SurrealDB before 3.1.0 contains an authorization bypass vulnerability in the RELATE statement that allows authenticated users with CREATE permission to overwrite existing edge records without UPDATE permission. Attackers can issue a RELATE statement with a SET id clause pointing to an existing edge id, causing the storage layer to silently overwrite the target record instead of rejecting the operation.","datePublished":"Jul 20, 2026, 12:04:43 PM","dateUpdated":"Oct 8, 2026, 3:23:49 PM","status":"PUBLISHED","baseScore":5.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-f82j-v89j-mf86\nhttps://www.vulncheck.com/advisories/surrealdb-before-relate-statement-record-overwrite\n","enisa_id":"EUVD-2026-45923\n","assigner":"VulnCheck","epss":0.28,"dataProcessed":"Nov 5, 2026, 7:16:05 AM","vulnerabilityProduct":[{"id":"75c504d1-d7d2-3b2b-98f6-2cc7231d20c7","product":{"name":"surrealdb","vendor":{"name":"surrealdb"}},"product_version":"0 \u003c3.1.0"}],"vulnerabilityVendor":[{"id":"4a6dfe92-e9a4-3fde-b58d-c18126b9953d","vendor":{"name":"surrealdb"}}]}}],"enisaIdAdvisory":[]}