PT-2026-61558

Name of the Vulnerable Software and Affected Versions SurrealDB versions prior to 3.1.0 Description A field-level SELECT permission bypass exists in indexed COUNT fast paths. This allows attackers to execute COUNT queries on indexed fields that have field-level SELECT restrictions, enabling them ...