CPE
SurrealDB versions before 3.3.0 contain an authorization bypass vulnerability where improper namespace and database header validation allows authenticated users to perform unauthorized cross-tenant data operations.