Authenticated users can cause SurrealDB to crash by submitting queries with very long chains of operators. The server builds an unbounded expression tree while parsing the query, leading to a stack overflow that aborts the entire process. This flaw is classified as CWE‑674 due to the unchecked growth of an internal data structure during build time. The primary impact is a denial of service to the database server, potentially affecting all clients that rely on it.

The affected product is SurrealDB. Versions prior to 3.1.5 are vulnerable. Any deployment of SurrealDB on those versions that allows authenticated query execution can be impacted.

The CVSS score of 7.1 indicates a high risk to availability. The EPSS score of < 1% indicates a very low likelihood of exploitation, though it is still not zero. The vulnerability is not listed in the CISA KEV catalog. Attackers must be authenticated to the database and can send queries with tens of thousands of chained operators; the likely attack vector is via an authenticated client or application layer that issues queries to the server. The vulnerability is exploitable without additional conditions if such queries are permitted.