CVE-2026-109337 | SurrealDB up to 3.2.0 Live Select before/after authorization

October 12, 2026 Yanac

A vulnerability identified as problematic has been detected in SurrealDB. Affected by this vulnerability is an unknown functionality of the component Live Select. Performing a manipulation of the argument before/after results in authorization bypass.

This vulnerability was named CVE-2026-109337. The attack may be initiated remotely. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More