---
id: "CVE-2026-121418"
kind: "vulnerability"
aliases: ["CVE-2026-121418"]
title: "SurrealDB: record users can infer restricted field values via indexes"
severity: "medium"
cvss: 5.3
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["database", "other", "self-hosted", "surrealdb"]
not_affected_if: ["no-indexes-on-restricted-fields", "no-record-users"]
published_at: "2026-11-03T15:17:31+00:00"
first_seen_at: "2026-11-03T15:21:59+00:00"
updated_at: "2026-11-03T15:23:35+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-121418", "first_seen_at": "2026-11-03T15:21:59+00:00"}]
---

# SurrealDB: record users can infer restricted field values via indexes

SurrealDB from 3.1.0 before 3.3.0 lets record users read restricted fields indirectly, because the query planner uses indexes on fields they cannot SELECT. An attacker can run full-text, compound B-tree or HNSW vector queries to learn which records contain guessed values or nearest vectors.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the SurrealDB version with `surreal version`; affected releases are 3.1.0 up to but not including `3.3.0`.
- Review whether record-level SELECT permissions restrict fields that also have indexes (full-text, compound B-tree or HNSW).

## Fix

- Move to `3.3.0` or later, per the vulnerability range in the sources.

## Timeline

- 2026-11-03T15:21:59+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-121418

## Documents

- [advisory] Vendor advisory: github.com https://github.com/surrealdb/surrealdb/security/advisories/GHSA-x6mm-9295-rvph
- [advisory] Third-party advisory: www.vulncheck.com https://www.vulncheck.com/advisories/surrealdb-3.1.0-before-3.3.0-incorrect-authorization-via-streaming-index-planner

## From the sources

SurrealDB from 3.1.0 before 3.3.0 contains an incorrect authorization vulnerability that allows record users to infer restricted field values because the streaming planner uses indexes on fields with restrictive SELECT permissions. Attackers can issue full-text MATCHES, compound B-tree, or HNSW KNN queries against restricted fields to learn which records contain guessed values or nearest vectors.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_