SurrealDB versions prior to 3.3.0 fail to verify the namespace or database supplied in the Surreal-NS and Surreal-DB HTTP headers. When an authenticated user sets these headers on the /sql endpoint or calls the RPC use method, the server grants access to any namespace or database the user is authenticated against, even if it belongs to a different tenant. This flaw allows the attacker to read, create, modify, and delete rows, as well as read DEFINE PARAM values, in other tenants' tables that have permissive permissions. The vulnerability directly impacts confidentiality, integrity, and availability of data belonging to other tenants.

All SurrealDB installations running a version earlier than 3.3.0 are affected. The vendor list includes the product SurrealDB by SurrealDB, Inc. No specific sub‑versions have been identified; any build before 3.3.0 contains the flaw.

The CVSS score of 8.6 indicates a high severity level and the EPSS score for this vulnerability is not available, so the current exploitation probability cannot be quantified. The vulnerability is not listed in the CISA KEV catalog. Based on the description, it is inferred that the attacker can remotely exploit the flaw by targeting the /sql HTTP endpoint or by invoking the RPC use method. An authenticated user can send requests with the vulnerable Surreal-NS or Surreal-DB headers, and the attacker only needs valid credentials; no privileged access or local compromise is required. Once exploited, the attacker can access and manipulate data across tenant boundaries, potentially leading to data leakage or service disruption.