PT-2026-61552 · Surrealdb · Surrealdb

Davidcarliez · CVE-2026-63736 · Publicado 2026-07-20 · Atualizado 2026-07-20

Mitre

CVSS v3.1

4.1

Média

Vetor base

AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N

SurrealDB before 3.2.0 contains a server-side request forgery vulnerability in the JWKS fetcher that validates only the URL hostname string against allow-lists without checking resolved IP addresses. An Owner role attacker can point an access method at an allow-listed hostname resolving to private or loopback addresses, causing the server to issue GET requests to internal addresses that would be blocked by direct URL.

Correção

SSRF

Enumeração de Fraquezas

CWE-918

Identificadores relacionados

CVE-2026-63736

Produtos afetados

Surrealdb

Referências · 3

• https://github.com/surrealdb/surrealdb/security/advisories/GHSA-5x4x-2946-qr67 · Aviso do Fabricante
• https://vulncheck.com/advisories/surrealdb-before-ssrf-via-jwks-url-hostname-resolution · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-63736 · Nota de Segurança