GHSA-627h-wprw-6cpg
SurrealDB versions before 2.2.2 have a local file read vulnerability in the DEFINE ANALYZER statement. Authenticated users with root, namespace, or database privileges can exploit this to read arbitrary files on the file system, specifically targeting two-column tab-separated files. This vulnerability allows exfiltration of file content by pointing analyzers to arbitrary file paths.
AI Analysis
Technical Summary
CVE-2025-71394 is a local file read vulnerability in SurrealDB prior to version 2.2.2. It arises from the DEFINE ANALYZER statement, which permits authenticated users with elevated privileges (root, namespace, or database level) to specify arbitrary file paths. This enables them to read and exfiltrate contents from files formatted as two-column tab-separated values on the underlying file system.
Potential Impact
The vulnerability allows authenticated users with certain elevated privileges to read arbitrary files on the file system, potentially exposing sensitive data contained in two-column tab-separated files. This could lead to unauthorized disclosure of information stored on the database server's file system.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Until a fix is available, restrict access to users with root, namespace, or database level privileges and monitor usage of the DEFINE ANALYZER statement to limit exploitation risk.
GHSA-627h-wprw-6cpg
Description
SurrealDB versions before 2.2.2 have a local file read vulnerability in the DEFINE ANALYZER statement. Authenticated users with root, namespace, or database privileges can exploit this to read arbitrary files on the file system, specifically targeting two-column tab-separated files. This vulnerability allows exfiltration of file content by pointing analyzers to arbitrary file paths.
CVSS v4.0
Affected software
pkg:github/surrealdb/surrealdbRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2025-71394 is a local file read vulnerability in SurrealDB prior to version 2.2.2. It arises from the DEFINE ANALYZER statement, which permits authenticated users with elevated privileges (root, namespace, or database level) to specify arbitrary file paths. This enables them to read and exfiltrate contents from files formatted as two-column tab-separated values on the underlying file system.
Potential Impact
The vulnerability allows authenticated users with certain elevated privileges to read arbitrary files on the file system, potentially exposing sensitive data contained in two-column tab-separated files. This could lead to unauthorized disclosure of information stored on the database server's file system.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Until a fix is available, restrict access to users with root, namespace, or database level privileges and monitor usage of the DEFINE ANALYZER statement to limit exploitation risk.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-627h-wprw-6cpg
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2025-71394"]
- Ecosystems
- []
- Database Specific Severity
- LOW
- Cvss Version
- 4.0
Threat ID: 6a5ba17e44ab8fbf7c789bb3
Added to database: 07/18/2026, 15:53:34 UTC
Last enriched: 07/18/2026, 16:22:51 UTC
Last updated: 07/18/2026, 17:19:46 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.