SurrealDB versions before 3.1.0 have an information disclosure vulnerability where authenticated users with UPDATE permissions can read field values that should be hidden by field-level SELECT permissions. This occurs because error messages leak raw operand values when arithmetic or extend operations are performed on hidden fields. The vulnerability allows bypassing of field-level access controls via error message content.