Threats tagged 'ghsa-98fx-66cf-fc7c'

SurrealDB versions prior to 3.1.0 contain a vulnerability where user-supplied expressions in SELECT and update-variant statements are evaluated before permission checks, allowing authenticated users to bypass table-level SELECT permissions and read full record contents. This flaw is limited to the current database and does not affect namespace or database isolation boundaries. A patch is available in version 3.1.0 and later that corrects the permission check order. Mitigations include disabling scripting functions to block the most direct exfiltration method and restricting query access for untrusted users.