CVE-2026-109336 | SurrealDB up to 3.2.x Live Select after/before authorization

October 12, 2026 Yanac

A vulnerability categorized as problematic has been discovered in SurrealDB up to 3.2.x. Affected is an unknown function of the component Live Select. Such manipulation of the argument after/before leads to authorization bypass.

This vulnerability is uniquely identified as CVE-2026-109336. The attack can be launched remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More