Medium severity4.3NVD Advisory· Published Jul 20, 2026· Updated Jul 22, 2026
CVE-2026-63749
CVE-2026-63749
Description
SurrealDB versions before 3.1.0 contain an authentication bypass vulnerability in LIVE SELECT subscriptions where permission expressions referencing $value, $before, $after, or $event are evaluated against attacker-controlled bindings instead of actual documents. Authenticated subscribers can bind chosen values to these parameter names and register LIVE SELECT queries to receive notifications for records that SELECT permission expressions should have hidden.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
2- github.com/surrealdb/surrealdb/security/advisories/GHSA-6wqw-vhfr-9999nvdVendor AdvisoryMitigation
- www.vulncheck.com/advisories/surrealdb-before-authentication-bypass-via-live-selectnvdThird Party Advisory
News mentions
0No linked articles in our index yet.