Duplicate Advisory: SurrealDB: Port-specific --deny-net rules silently bypassed on HTTP redirect

SurrealDB prior to version 3.1.0 contains a capability bypass vulnerability related to HTTP redirect handling. Authenticated users can circumvent port-scoped --deny-net rules by chaining an HTTP redirect from an allowed hostname to a host and port combination that should be denied. The vulnerability arises because the port information is discarded during the evaluation of redirect policies, allowing the redirect to proceed despite the intended restrictions.

Authenticated users can bypass network access restrictions that rely on port-specific deny rules, potentially allowing access to otherwise restricted network resources. The impact is limited to confidentiality and integrity with no availability impact noted. The CVSS score is 6.4 (medium severity), reflecting a moderate risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since this advisory is a duplicate and no patch links are provided, users should monitor the official SurrealDB advisories for updates. Until a fix is available, consider restricting authenticated user capabilities or network access controls outside of SurrealDB to mitigate risk.