Tenant scope bypass in SurrealDB custom API routes (CVE-2026-63735)

Authenticated users in any namespace/database can invoke custom API endpoints belonging to other namespaces/databases by specifying the target scope in the URL path or via namespace/database headers. The route applied caller-supplied namespace and database values to the session without verifying that the caller's authenticated scope covered them; because custom API handlers run with permissions disabled under definer's rights, a PERMISSIONS FULL endpoint was fully exposed to cross-tenant invocation. This allows an attacker with minimal (VIEWER-level) credentials on any namespace/database to read data from or trigger writes against another tenant's endpoints. Affected versions: - < 3.2.0 We recommend updating to: 3.2.0. CVSS 8.6 · our assessment: this_week Reference: https://github.com/surrealdb/surrealdb/security/advisories/GHSA-848m-r628-vrxw Details: https://vuln.today/cve/CVE-2026-63735