CVE-2024-58356

SurrealDB prior to 2.1.4 contains a permission-bypass issue: when using DEFINE TABLE ... OVERWRITE on tables defined with TYPE RELATION, the PERMISSIONS clause changes do not take effect, potentially allowing a client to access data intended to be restricted. Affected versions: before 2.1.4 (per ...

PT-2026-60937

Name of the Vulnerable Software and Affected Versions SurrealDB versions prior to 2.1.4 Description An issue exists where the system silently fails to overwrite table definitions when the DEFINE TABLE ... OVERWRITE clause is applied to tables defined with TYPE RELATION. Since table definitions...