CVE-2025-71390 | SurrealDB up to 2.3.5/2.2.5/2.1.7 Http Hostname access control

July 18, 2026 Yanac

A vulnerability classified as critical has been found in SurrealDB up to 2.3.5/2.2.5/2.1.7. Affected is an unknown function of the component Http. This manipulation of the argument Hostname causes improper access controls.

This vulnerability is handled as CVE-2025-71390. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More