SurrealDB before 2.2.2 fails to validate HTTP redirects in http functions, allowing authenticated users to bypass deny-net restrictions by redirecting to blocked IP addresses. Attackers can host a public server that redirects to denied network targets, enabling server-side request forgery to access internal endpoints and retrieve sensitive information.
CVE-2025-71398
CVSS base score
7.6 (v3.1)
Severity
HIGH
Attack vector
Network
Weakness
CWE-918
Last modified
October 29, 2026
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
Affected products
surrealdb surrealdb
References
- github.com Vendor Advisory
- www.vulncheck.com Third Party Advisory