CyberRota Analysis
AI-GeneratedSurrealDB versions prior to 1.1.0 are vulnerable to stack overflow attacks due to inadequate enforcement of recursion depth limits in nested SurrealQL statements. This flaw allows authorized attackers to craft deeply nested queries that can crash the server, potentially leading to service disruption. Organizations using affected versions should prioritize patching to mitigate the risk of denial-of-service incidents.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SurrealDB versions before 1.1.0 fail to enforce recursion depth limits when parsing nested SurrealQL statements including IF, RELATE, and attribute access idioms. Authorized attackers can submit queries with excessive nesting depth to cause stack overflow and crash the server.