CVE-2024-58369 affects SurrealDB versions prior to 1.1.1 by failing to properly validate the invocation of custom parameters and functions at root or namespace levels. This flaw allows authorized clients to invoke these entities at unsupported levels, causing the server to panic and crash, leading to denial of service. The vulnerability is categorized under CWE-248 (Exposure of Sensitive Information or Resources to an Unauthorized Actor) but here manifests as a denial of service due to server instability. There is no indication of remote code execution or data breach from the provided data. No patch or official fix is currently documented in the input data.

Exploitation of this vulnerability results in denial of service by crashing the SurrealDB server. This disrupts availability for legitimate users. The attack requires authorized client access, so it is not exploitable by unauthenticated attackers. There is no evidence of data compromise or privilege escalation from the provided information.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to authorized clients and monitor for unusual invocation of custom parameters or functions at root or namespace levels. Avoid invoking custom parameters or functions at unsupported levels if possible.