What is CVE-2026-63739?

CVE-2026-63739 is a high-severity vulnerability in Surrealdb, classified under Path Traversal. CVSS score: 7.7/10. Published 2026-07-20.

How severe is CVE-2026-63739?

High severity. CVSS v3 base score is 7.7 out of 10.

Path Traversal in Surrealdb

CVE-2026-63739

SurrealDB before 3.1.5 contains an arbitrary file read vulnerability in the DEFINE ANALYZER mapper filter that allows database users with EDITOR or OWNER roles to read files accessible to the SurrealDB process. Attackers can specify arbitr…

Vulnerability class: Path Traversal (Directory Traversal)

CVSS v3 metric

CVSS v3 base score 7.7 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N.

Affected products

Surrealdb — versions 0, 3.1.5

Weakness classification (CWE)

CWE-22 — Path Traversal

References

disclosure@vulncheck.com (vendor-advisory)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2026-63739?: CVE-2026-63739 is a high-severity vulnerability in Surrealdb, classified under Path Traversal. CVSS score: 7.7/10. Published 2026-07-20.
How severe is CVE-2026-63739?: High severity. CVSS v3 base score is 7.7 out of 10.