SurrealDB before 1.5.5 and 2.0.0-beta before 2.0.0-beta.3 has a vulnerability in its RPC API signin and signup operations where arbitrary objects are accepted without proper recursive validation. When a SIGNIN or SIGNUP query is defined and the RPC API is exposed to untrusted users, an attacker can supply a bincode-serialized binary object containing a subquery. This subquery executes under a system user session with editor role privileges, enabling modification of non-IAM resources. The attacker cannot directly view query results or affect IAM resources, which require owner role privileges.

An unauthenticated attacker can execute arbitrary subqueries within the database owner's SIGNIN/SIGNUP query context with editor role permissions. This enables the attacker to select, create, update, and delete non-IAM resources. However, the attacker cannot view query results directly or modify IAM resources, limiting the scope of impact to non-IAM data manipulation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict exposure of the RPC API signin and signup operations to trusted users only. Avoid defining SIGNIN or SIGNUP queries that accept arbitrary objects from untrusted sources. Monitor vendor channels for updates and apply patches promptly once released.