CVE-2025-71392 | SurrealDB up to 2.0.4/2.1.4/2.2.1 Export table/field injection

July 18, 2026 Yanac

A vulnerability marked as problematic has been reported in SurrealDB up to 2.0.4/2.1.4/2.2.1. This affects an unknown function of the component Export. The manipulation of the argument table/field leads to injection.

This vulnerability is traded as CVE-2025-71392. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More