SurrealDB versions prior to 3.1.0 are vulnerable to a denial of service triggered by malicious LIVE queries whose WHERE clauses evaluate to errors. When such a query is registered, any subsequent CREATE, UPDATE, or DELETE statements against the watched table are blocked, preventing data modification. The weakness is identified as CWE‑754, reflecting resource exhaustion or denial of service.

The vulnerability affects the SurrealDB product operated by the vendor surrealdb. All installations running any version before 3.1.0 are susceptible. Users with only select permission can register a live query that exploits the flaw.

The CVSS score of 7.1 indicates a high severity impact, and the EPSS score is <1% indicating a low likelihood of exploitation. The vulnerability is not listed in CISA's KEV catalog. The attack requires authentication with select privileges; the attacker can register a harmful LIVE query and then cause all write operations, even for privileged users like root, to fail until the query is terminated or the session ends. Because the flaw is limited to authenticated users, the risk is constrained to systems where such users exist and have the ability to create LIVE queries.