CVE-2026-63733 SurrealDB before 3.2.0 Permissions Bypass via PERMISSIONS Clause

SurrealDB versions before 3.2.0 contain a permissions bypass vulnerability where data-modifying statements within PERMISSIONS clauses execute with enforcement disabled. Attackers with permission to perform a guarded operation can write to tables they lack permission for by embedding CREATE, UPDAT...