CVE-2024-58363 | SurrealDB up to 1.5.3 Database Switch use $auth improper authorization

July 18, 2026 Yanac

A vulnerability was found in SurrealDB up to 1.5.3 and classified as critical. Affected by this issue is the function use of the component Database Switch. Executing a manipulation of the argument $auth can lead to improper authorization.

This vulnerability is tracked as CVE-2024-58363. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More