What is CVE-2023-54366?

CVE-2023-54366 is a high-severity vulnerability in Surrealdb, classified under Incorrect Default Permissions. CVSS score: 8.8/10. Published 2026-07-18.

How severe is CVE-2023-54366?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Surrealdb

CVE-2023-54366

SurrealDB before 1.0.1 sets default table permissions to FULL instead of NONE, allowing SELECT, CREATE, UPDATE, and DELETE operations on tables without explicit permissions. Attackers with database access or unauthenticated users on public…

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Surrealdb — versions 0, 1.0.1

Weakness classification (CWE)

CWE-276 — Incorrect Default Permissions

References

disclosure@vulncheck.com (vendor-advisory)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2023-54366?: CVE-2023-54366 is a high-severity vulnerability in Surrealdb, classified under Incorrect Default Permissions. CVSS score: 8.8/10. Published 2026-07-18.
How severe is CVE-2023-54366?: High severity. CVSS v3 base score is 8.8 out of 10.