{"action":"Upgrade surrealdb to 3.2.0 or later.","affected":[{"fixed":"3.2.0","introduced":"0"}],"component":"surrealdb","cve_ids":["CVE-2026-63735"],"ecosystem":"crates.io","epss":0.00367,"exploited":false,"fixed_versions":["3.2.0"],"ghsa_id":"GHSA-848m-r628-vrxw","id":"tcs_01M5KEVJNJC2MNT8P5VQHX4Y83","modified_at":"2026-09-04T20:25:35.673187Z","published_at":"2026-09-04T20:07:07Z","references":["https://osv.dev/vulnerability/GHSA-848m-r628-vrxw","https://github.com/surrealdb/surrealdb/security/advisories/GHSA-848m-r628-vrxw","https://nvd.nist.gov/vuln/detail/CVE-2026-63735","https://github.com/surrealdb/surrealdb/commit/0938f88d196dc4eb11a82af343df3fffe9c195e2","https://github.com/surrealdb/surrealdb/commit/75b7154f84904d047619b5a47b08d256254dceca","https://github.com/surrealdb/surrealdb","https://www.vulncheck.com/advisories/surrealdb-before-authentication-bypass-via-custom-api"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-848m-r628-vrxw","url":"https://osv.dev/vulnerability/GHSA-848m-r628-vrxw"}],"summary":"SurrealDB: Custom API route lets authenticated callers override namespace/database scope via URL path"}