SurrealDB versions prior to 3.2.0 allow an authenticated user to target custom API endpoints in any namespace or database by inserting a different scope into the URL path. The server does not validate that the requested namespace or database matches the authenticated tenant, enabling an attacker with legitimate credentials to execute privileged requests or read data that belong to other tenants. This results in potential data exposure and unintended operations across tenants.

Every SurrealDB deployment running a version older than 3.2.0 is affected. The flaw is present in the SurrealDB product released by SurrealDB and applies to any installation that exposes custom API routes for database operations.

The vulnerability carries a CVSS score of 8.6, indicating high severity, while the EPSS score of less than 1% suggests a low yet non‑zero exploitation probability. It is not listed in CISA’s KEV catalog. An attacker must first obtain valid credentials for any namespace or database; once authenticated, the lack of scope validation permits straightforward cross‑tenant access, making the risk significant for multi‑tenant environments.