SurrealDB versions before 3.2.0 have a permissions bypass vulnerability where data-modifying statements embedded within PERMISSIONS clauses execute without enforcement. This allows attackers with limited permissions to write to tables they should not have access to, potentially causing unintended data writes and corruption. The advisory is a duplicate and has been withdrawn in favor of GHSA-66r2-5gwj-gxm2.