A flaw was found in the live query subscription mechanism of the database engine. This vulnerability allows record or guest users to observe unauthorized records within the same table, bypassing access controls, via crafted LIVE SELECT subscriptions when other users alter or delete records.

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Redhat
  • Service Mesh

No data.

No data.

References
Link Providers
https://access.redhat.com/security/cve/CVE-2025-11060 cve-icon cve-icon
https://bugzilla.redhat.com/show_bug.cgi?id=2394708 cve-icon cve-icon
https://github.com/surrealdb/surrealdb cve-icon cve-icon cve-icon
https://github.com/surrealdb/surrealdb/commit/d81169a06b89f0c588134ddf2d62eeb8d5e8fd0c cve-icon cve-icon cve-icon
https://github.com/surrealdb/surrealdb/pull/6247 cve-icon cve-icon cve-icon
https://github.com/surrealdb/surrealdb/security/advisories/GHSA-7vm2-j586-vcvc cve-icon cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-11060 cve-icon
https://surrealdb.com/docs/surrealql/statements/live cve-icon cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-11060 cve-icon
History

Sat, 27 Sep 2025 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 threat_severity

Moderate

Fri, 26 Sep 2025 13:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Fri, 26 Sep 2025 12:30:00 +0000

Type Values Removed Values Added
Description A flaw was found in the live query subscription mechanism of the database engine. This vulnerability allows record or guest users to observe unauthorized records within the same table, bypassing access controls, via crafted LIVE SELECT subscriptions when other users alter or delete records.
Title Surrealdb: surrealdb is vulnerable to unauthorized data exposure via live query subscriptions
First Time appeared Redhat
Redhat service Mesh
Weaknesses CWE-863
CPEs cpe:/a:redhat:service_mesh:3
Vendors & Products Redhat
Redhat service Mesh
References
Metrics cvssV3_1

{'score': 5.7, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N'}
cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2025-09-26T13:04:11.588Z

Reserved: 2025-09-26T11:46:23.698Z

Link: CVE-2025-11060

cve-icon Vulnrichment

Updated: 2025-09-26T13:04:08.951Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-09-26T13:15:41.757

Modified: 2025-09-26T14:32:19.853

Link: CVE-2025-11060

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-09-11T21:53:23Z

Links: CVE-2025-11060 - Bugzilla