SurrealDB before 2.3.6 does not check that DNS‑resolved hostnames of URLs passed to its http::* functions comply with the deny‑net restrictions defined by the administrator. An authenticated user can call http::<fn>(<url>) with a hostname that resolves to an IP address in the deny‑net list. The server then forwards the request and returns the response, effectively bypassing the intended network access control. This flaw allows an attacker to reach internal services that should be hidden, potentially exfiltrating or modifying sensitive data, as described by CWE‑863.

The vulnerability affects the SurrealDB database engine. Versions prior to 2.3.6, specifically 2.2.6, 2.1.8, the 3.0.0‑alpha.7 release and earlier, are impacted. Any deployment using deny‑net restrictions on HTTP routes is at risk.

The CVSS base score is 5.8, reflecting a medium severity with the impact confined to the scope of an authenticated user. The EPSS score is indicated as < 1%, suggesting the probability of exploitation in the near term is very low. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires the ability to invoke http::* functions, which an authenticated user typically has; the attack bypasses denial restrictions by using a hostname that the resolver maps to a prohibited IP. Because the flaw is not tied to remote code execution, the risk is limited to unauthorized access to internal endpoints and potential data compromise.