CVE-2024-58358 SurrealDB before 2.1.0 Denial of Service via Nonexistent Role

SurrealDB versions before 2.1.0 contain a denial of service vulnerability in role conversion that allows privileged owner users to define users with nonexistent roles. Attackers can trigger an uncaught panic by signing in with a user assigned an invalid role, crashing the server...

CVE-2024-58358

SurrealDB versions before 2.1.0 are affected by a denial-of-service flaw in the role conversion logic. The issue lets privileged owner users define users with nonexistent roles; signing in with a user assigned an invalid role can trigger an uncaught panic, crashing the server. The vulnerability i...

PT-2026-60939

Name of the Vulnerable Software and Affected Versions SurrealDB versions prior to 2.1.0 Description A denial of service issue exists in role conversion. Privileged owner users can define users with nonexistent roles, which allows an attacker to trigger an uncaught panic—a critical error that caus...