SurrealDB: Improper MCP authentication vulnerability (CVE-2026-121419)
SurrealDB versions 3.1.0 before 3.3.0 contain an improper authentication vulnerability in the MCP BoundSubject fingerprint.
CVE search metadata
CVE search record: CVE-2026-121419. Severity: high. CVSS: 8.1. KEV: no. Product: SurrealDB (3.1.0 up to, but not including, 3.3.0). Brief: SurrealDB: Improper MCP authentication vulnerability (CVE-2026-121419). Brief link: https://feed.craftedsignal.io/briefs/2026-11-surrealdb-auth-bypass/
Triage facts
Revision 2- Applicability
- SurrealDB (3.1.0 up to, but not including, 3.3.0)
- Evidence
- Unknown
- Severity
- High
- Sources
- 2 public sources
- Freshness
- Revision 2Nov 3, 16:15 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
Revision history 1 entry · Revision 2
- Revision 2
poc_available
Changed: claim_state, has_poc, lastmod, poc_references, references, updates
Sources: 1
SurrealDB from 3.1.0 before 3.3.0 contains an improper authentication vulnerability where the MCP BoundSubject fingerprint uses the access method name instead of per-user identity for JWT/Bearer access. Attackers with a valid low-privilege token for the same access method and a victim's mcp-session-id can hijack the session and execute MCP tools with the victim's roles and permissions.