CVE-2026-109334

{
  "etk_id": "ETK-2026-1389",
  "cve_id": "CVE-2026-109334",
  "display_id": "CVE-2026-109334",
  "ghsa_id": "GHSA-jhvg-6gg5-qpmp",
  "euvd_id": "EUVD-2026-97636",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Cross-tenant authorization bypass in SurrealDB",
  "summary": "SurrealDB versions before 3.3.0 may fail to enforce the tenant scope associated with certain authenticated system users. An authenticated attacker could access or alter data in another namespace or database, subject to that tenant's table permission settings.",
  "mitigation": "Upgrade SurrealDB to version 3.3.0 or later. Until upgraded, restrict use of namespace- and database-scoped system accounts and limit their access to untrusted users.",
  "vendor": "surrealdb",
  "product": "surrealdb",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "< 3.3.0"
      ],
      "ecosystem": "rust",
      "fixed_versions": [
        "3.3.0"
      ],
      "package_name": "surrealdb",
      "purl": "pkg:cargo/surrealdb"
    }
  ],
  "cwes": [
    639
  ],
  "cvss_score": 8.6,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
  "epss_score": 0.0026,
  "epss_percentile": 0.1638,
  "epss_asof": "2026-10-20",
  "automation": "deterministic",
  "check": true,
  "check_confidence_basis": "differential",
  "exploit": false,
  "pipeline_minutes": 13.869702166666666,
  "t0_at": "2026-10-12T16:05:22.448000+00:00",
  "signals": {
    "check": {
      "at": "2026-10-12T17:46:14.926190+00:00",
      "days": 0.07005183090277778,
      "is_lower_bound": false,
      "measured_at": "2026-10-12T16:05:22.448000+00:00",
      "url": null
    },
    "trigger_signal": {
      "at": "2026-10-12T16:05:22.448000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-12T16:05:22.448000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-109334"
    }
  }
}