CVE-2026-109342 | SurrealDB up to 3.2.x RPC revoke missing authentication

October 12, 2026 Yanac

A vulnerability, which was classified as critical, was found in SurrealDB up to 3.2.x. Affected by this issue is the function revoke of the component RPC. The manipulation results in missing authentication.

This vulnerability is reported as CVE-2026-109342. The attack can be launched remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More