PT-2026-61561

Name of the Vulnerable Software and Affected Versions SurrealDB versions prior to 3.1.0 Description Authenticated users can bypass authorization by spoofing composite record-id field values. This occurs when attackers write to editable body fields using names that match id components, such as tho...