---
id: "CVE-2026-121423"
kind: "vulnerability"
aliases: ["CVE-2026-121423"]
title: "SurrealDB: nested values crash the database server for all tenants"
severity: "high"
cvss: 7.1
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: []
ecosystems: []
tags: ["ai-tooling", "multi-tenant", "self-hosted", "surrealdb"]
not_affected_if: ["managed-hosting", "trusted-users-only"]
published_at: "2026-11-03T15:17:32+00:00"
first_seen_at: "2026-11-03T15:21:59+00:00"
updated_at: "2026-11-03T15:22:56+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-121423", "first_seen_at": "2026-11-03T15:21:59+00:00"}]
---

# SurrealDB: nested values crash the database server for all tenants

SurrealDB before 3.3.0 recurses without limit on deeply nested values, so a stack overflow aborts the surreal process. An authenticated user can repeat UPDATE and SELECT or EXPORT statements to keep the database down for every tenant.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the SurrealDB server version with `surreal version`; versions below `3.3.0` are in range.
- Confirm whether untrusted authenticated users can run UPDATE, SELECT or EXPORT statements against the instance.

## Fix

- SurrealDB: move to `3.3.0` or later.

## Timeline

- 2026-11-03T15:21:59+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-121423

## Documents

- [advisory] Vendor advisory: github.com https://github.com/surrealdb/surrealdb/security/advisories/GHSA-rpmq-gq3f-h6jg
- [advisory] Third-party advisory: www.vulncheck.com https://www.vulncheck.com/advisories/surrealdb-before-3.3.0-dos-via-unbounded-recursion-in-val-value-serialization

## From the sources

SurrealDB before 3.3.0 contains an unbounded recursion vulnerability that allows authenticated users to abort the surreald process by triggering stack overflow on deeply nested values. Attackers can repeatedly run UPDATE statements wrapping a stored array in itself, then SELECT or EXPORT it, causing persistent denial of service for all tenants.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_