CVE-2025-71391: SurrealDB before 2.2.2 Denial of Service via /sql endpoint
SurrealDB versions before 2.2.2 contain an uncaught exception vulnerability in the net module that allows authenticated users to crash the database. Attackers can send crafted HTTP queries containing null bytes to the /sql endpoint, causing an unhandled exception that crashes the SurrealDB instance and any dependent applications.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
SurrealDBto a version that resolves this vulnerability.Fixed in 2.2.2 - Compensating control
If immediate upgrade to SurrealDB 2.2.2 is not possible, restrict access to the /sql endpoint to trusted authenticated users (e.g., via network/ACL/WAF) to reduce the ability of authenticated attackers to send crafted null-byte HTTP queries.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-71391?
CVE-2025-71391 has a severity rating of high, with a CVSS score of 7.1.
How do I fix CVE-2025-71391?
To fix CVE-2025-71391, upgrade SurrealDB to version 2.2.2 or later.
What type of vulnerability is CVE-2025-71391?
CVE-2025-71391 is a Denial of Service vulnerability affecting SurrealDB.
Who is affected by CVE-2025-71391?
Authenticated users of SurrealDB versions before 2.2.2 are affected by CVE-2025-71391.
What exploit is associated with CVE-2025-71391?
CVE-2025-71391 can be exploited by sending crafted HTTP queries containing null bytes to the /sql endpoint.