CVE-2026-109341 | SurrealDB up to 3.2.x JSON Patch authorization

October 12, 2026 Yanac

A vulnerability classified as critical has been found in SurrealDB up to 3.2.x. This affects an unknown function of the component JSON Patch. This manipulation causes authorization bypass.

This vulnerability appears as CVE-2026-109341. The attack may be initiated remotely. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More