CVE-2024-58369

HIGH7.1

SurrealDB before 1.1.1 Denial of Service via Global Parameters

Published Jul 18, 2026

Modified 5 days ago

Details

SurrealDB versions before 1.1.1 fail to properly validate invocation of custom parameters and functions at root or namespace levels, causing server panic. Authorized clients can invoke these entities at unsupported levels to crash the SurrealDB server, resulting in denial of service.

References

ADVISORY

https://github.com/surrealdb/surrealdb/security/advisories/GHSA-jm4v-58r5-66hj

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2024-58369

ADVISORY

https://www.vulncheck.com/advisories/surrealdb-before-denial-of-service-via-global-parameters

CVSS Analysis

CVSS v4.0

7.1

Exploitability

Attack Vector