What is CVE-2026-63759?

CVE-2026-63759 is a medium-severity vulnerability in Surrealdb, classified under Uncontrolled Recursion. CVSS score: 6.5/10. Published 2026-07-20.

How severe is CVE-2026-63759?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Surrealdb

CVE-2026-63759

SurrealDB before 3.1.0 fails to enforce recursion depth limits in the type/kind parser when processing nested type annotations. Authenticated attackers can send queries with deeply nested type annotations to exhaust server memory and crash…

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Affected products

Surrealdb — versions 0, 3.1.0

Weakness classification (CWE)

CWE-674 — Uncontrolled Recursion

References

disclosure@vulncheck.com (vendor-advisory)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2026-63759?: CVE-2026-63759 is a medium-severity vulnerability in Surrealdb, classified under Uncontrolled Recursion. CVSS score: 6.5/10. Published 2026-07-20.
How severe is CVE-2026-63759?: Medium severity. CVSS v3 base score is 6.5 out of 10.