EUVD-2026-45931
GHSA-m464-hj36-96vx
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessReach WebSocket /rpc endpoint
-
DeliveryCraft deeply nested JSON payload
-
ExploitSend single unauthenticated RPC message
-
ExecutionTrigger unbounded recursion in value/JSON parser
-
PersistExhaust server memory
-
ImpactCrash SurrealDB process (denial of service)
Vulnerability Assessment
| Weakness |
CWE
ASVS 5.0
V15 - Secure Coding and Architecture Recursion depth limits
|
| Exploitation Conditions | Exploitation requires only network reachability to the SurrealDB WebSocket /rpc endpoint (default RPC interface) on a version earlier than 3.1.0; the malicious input is a single deeply nested JSON payload using stacked {, [, or ( tokens routed through the value/JSON parser. Per CVSS 4.0 AV:N/AC:L/AT:N/PR:N/UI:N, no authentication, no query-execution privileges, and no user interaction are needed against a default configuration. The primary limiting factor is network exposure: deployments that restrict /rpc to trusted clients (firewall, VPN, proxy allowlist) or that have already upgraded to 3.1.0+ are not exploitable, and instances not exposing the WebSocket endpoint to untrusted networks are effectively out of reach. |
| Impact | The signals are internally consistent for a high-severity availability bug and nothing else. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N) confirms remote, low-complexity, unauthenticated, no-interaction reachability, and the impact profile is purely availability (VA:H) with VC:N/VI:N - no data disclosure or code execution, matching the DoS tag and the CWE-674 root cause. The 8.7 base score is driven entirely by the ease of triggering a full-process crash, not by any confidentiality/integrity risk. No EPSS score, SSVC decision, or KEV entry was provided, and there is no POC in the supplied data, so real-world exploitation pressure is unquantified - but exploitation is technically trivial and self-evident from the advisory, so absence of a published POC should not be read as low likelihood. Notably this is explicitly an incomplete fix for a prior advisory, which raises the odds that exposed/unpatched instances exist. Priority is genuinely high for any internet-exposed SurrealDB node; for instances behind network restrictions the practical risk drops sharply. |
| Exploit ScenarioDerived | An attacker who can reach a SurrealDB server's WebSocket /rpc port opens a connection and sends a single RPC message containing a JSON value nested thousands of levels deep (e.g. many stacked [ or { tokens). The parser recurses without honoring the depth limit, memory balloons, and the server process crashes, taking down the database for all users. No credentials, valid query, or user interaction are required, and the payload is trivial to construct from the advisory description; no public exploit is identified at time of analysis. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Jul 20, 2026
Denial of service in SurrealDB before 3.1.0 lets an unauthenticated remote attacker crash the database with a single WebSocket message by sending a deeply nested JSON payload to the /rpc endpoint. The value/JSON parser ignores the configured recursion depth limit for nested braces, brackets, and parentheses, so uncontrolled recursion (CWE-674) exhausts server memory and terminates the process. This is an incomplete-fix regression of GHSA-6r8p-hpg7-825g, which patched the same bug class in the expression parser but missed the value/JSON code path; no public exploit identified at time of analysis, though the trigger is trivially reproducible from the advisory.
RemediationAI
Vendor-released patch: 3.1.0 - upgrade SurrealDB to 3.1.0 or later, which enforces the configured recursion depth limit in parse_value and parse_json (fix commit https://github.com/surrealdb/surrealdb/commit/1bd9826f477f4089134460dc5574b6f4e6916973 ). If immediate upgrade is not possible, apply the vendor workaround of restricting network access to the WebSocket /rpc endpoint to trusted clients only - for example placing the database behind a firewall, VPN, or reverse proxy allowlist so untrusted hosts cannot reach /rpc; the trade-off is that any legitimate client that connects directly over the network must be enumerated and permitted, which complicates broadly-accessible or multi-tenant deployments. Refer to the advisory at https://github.com/surrealdb/surrealdb/security/advisories/GHSA-q729-696q-g9pq for details.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in cargo
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
SurrealDB is a multi-model (document/graph/relational) database written in Rust that exposes a JSON-RPC API over WebSocket at /rpc. Its query pipeline includes several parsers; the expression parser correctly bounds recursion when it encounters opening tokens ({, [, (), but the separate value parser (parse_value) and JSON parser (parse_json) failed to apply the same configured depth limit. The root cause is CWE-674 (Uncontrolled Recursion): each additional level of nesting drives another recursive descent call, so an attacker-controlled nesting depth translates directly into unbounded stack/heap growth until the process is OOM-killed or aborts. Because the flaw is in the parser itself - before any authentication, query planning, or permission checks - it is reachable purely by feeding malformed structured input.
Know when Surrealdb gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Remote, low-complexity, unauthenticated crash of the /rpc parser with no user interaction (AV:N/AC:L/PR:N/UI:N); impact is availability-only (A:H) with no confidentiality or integrity effect.
Primary rating from Vendor (vulncheck).
CVSS VectorVendor: vulncheck
Lifecycle Timeline
2DescriptionCVE.org
SurrealDB before 3.1.0 fails to enforce the configured recursion depth limit in the value and JSON parser when processing nested braces, brackets, or parentheses. Unauthenticated attackers can send deeply nested JSON payloads to the WebSocket /rpc endpoint to exhaust server memory and crash the process.
Executive ViewAI
SurrealDB versions before 3.1.0 contain a critical denial-of-service vulnerability (CVE-2026-63760, CVSS 8.7) that allows unauthenticated remote attackers to crash the database by sending a specially crafted WebSocket message. Organizations running affected SurrealDB instances face immediate risk of database unavailability, with no vendor patch currently available, creating urgent pressure on operational resilience and business continuity.
No vendor-released patch identified at time of analysis. Interim mitigations include: (1) Network isolation and segmentation restricting /rpc endpoint access to authorized internal systems only; (2) Web application firewall or load balancer rules configured to reject requests containing deeply nested JSON payloads; (3) Rate-limiting and connection throttling on WebSocket connections to /rpc; (4) Comprehensive process-level monitoring detecting memory spikes and unexpected crashes with automated alerts; (5) Tested backup and recovery procedures enabling rapid database restoration if compromise occurs.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Denial of Service attacks render applications or systems unavailable by overwhelming resources or triggering failure conditions.
Privilege escalation via second-order SurrealQL injection in SurrealDB before 2.0.5, 2.1.5, and 2.2.2 lets an authentica
Privilege escalation in SurrealDB before v3.1.0 lets unauthenticated attackers hijack the privileges of concurrently-act
Denial of service in SurrealDB before 3.1.0 lets an unauthenticated remote attacker crash the entire database process wi
Session hijacking in SurrealDB before 3.1.0 lets unauthenticated attackers enumerate attached session UUIDs through the
SurrealDB versions before 3.3.0 fail to validate a caller's authorization level when the SurrealQL USE statement switche
Cross-tenant data access in SurrealDB before 3.3.0 allows an authenticated namespace- or database-level SYSTEM user to b
Cross-tenant authorization bypass in SurrealDB before 3.2.0 lets any authenticated user reach custom API endpoints belon
Arbitrary file read in SurrealDB before 3.1.5 lets an authenticated database user holding the EDITOR or OWNER role discl
Confused-deputy privilege escalation in SurrealDB before 2.5.0 and before 3.0.0-beta.3 lets a low-privileged user (e.g.
Denial of service in SurrealDB before 3.1.5 lets an authenticated user with query-execution privileges crash the entire
Denial of service in SurrealDB versions before 3.3.0 lets a query-capable authenticated user with embedded JavaScript sc
Authenticated SurrealDB record users can read field values that field-level SELECT permissions are meant to conceal on S
Exploit-DB