PT-2026-60949 · Surrealdb · Surrealdb

Jabis + 1 · CVE-2024-58369 · Published 2026-07-18 · Updated 2026-07-18

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions SurrealDB versions prior to 1.1.1

Description Authorized clients can cause a server panic leading to a denial of service by invoking custom parameters and functions at root or namespace levels. This occurs because the server fails to properly validate these invocations at unsupported levels.

Recommendations Update SurrealDB to version 1.1.1 or later.

Fix

DoS

Weakness Enumeration

CWE-248

Related Identifiers

CVE-2024-58369

Affected Products

Surrealdb

References · 4

• https://github.com/surrealdb/surrealdb/security/advisories/GHSA-jm4v-58r5-66hj · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-58369 · Security Note
• https://vulncheck.com/advisories/surrealdb-before-denial-of-service-via-global-parameters · Note
• https://twitter.com/VulmonFeeds/status/2078515351558435009 · Twitter Post