SurrealDB versions before 3.1.0 have an authorization bypass vulnerability in the KILL statement. This flaw allows authenticated users to terminate other users' live query subscriptions without verifying ownership. The vulnerability can disrupt real-time data subscriptions of other users. It has a CVSS 3.1 score of 5.4, indicating medium severity.