CVE-2026-109343

{
  "etk_id": "ETK-2026-1388",
  "cve_id": "CVE-2026-109343",
  "display_id": "CVE-2026-109343",
  "ghsa_id": "GHSA-2v9j-645m-pcrq",
  "euvd_id": "EUVD-2026-97645",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Cross-tenant authorization bypass in SurrealDB",
  "summary": "SurrealDB versions before 3.3.0 do not enforce the caller's authenticated scope when switching namespaces or databases. An authenticated namespace, database, or record user may access data in another tenant, including reading or modifying rows where the target table's permissions allow it.",
  "mitigation": "Upgrade SurrealDB to version 3.3.0 or later. Until upgraded, restrict access to trusted authenticated users and review tenant table permissions, especially overly broad permissions.",
  "vendor": "surrealdb",
  "product": "surrealdb",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "< 3.3.0"
      ],
      "ecosystem": "rust",
      "fixed_versions": [
        "3.3.0"
      ],
      "package_name": "surrealdb",
      "purl": "pkg:cargo/surrealdb"
    }
  ],
  "cwes": [
    639
  ],
  "cvss_score": 8.6,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
  "epss_score": 0.0026,
  "epss_percentile": 0.1638,
  "epss_asof": "2026-10-20",
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 9.465136883333333,
  "t0_at": "2026-10-12T16:05:28.543000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-12T16:05:28.543000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-12T16:05:28.543000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-109343"
    }
  }
}