What is CVE-2024-58368?

CVE-2024-58368 is a high-severity vulnerability in Surrealdb, classified under CWE-248. CVSS score: 7.5/10. Published 2026-07-18.

How severe is CVE-2024-58368?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Surrealdb

CVE-2024-58368

SurrealDB versions before 1.1.0 fail to properly parse the ID, DB, and NS headers in HTTP REST API requests containing special characters. Unauthenticated attackers can send crafted HTTP requests with malformed header values to trigger an…

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Surrealdb — versions 0, 1.1.0

Weakness classification (CWE)

CWE-248

References

disclosure@vulncheck.com (vendor-advisory)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2024-58368?: CVE-2024-58368 is a high-severity vulnerability in Surrealdb, classified under CWE-248. CVSS score: 7.5/10. Published 2026-07-18.
How severe is CVE-2024-58368?: High severity. CVSS v3 base score is 7.5 out of 10.