CVE-2026-121419 — Vulnerability intelligence

—

Published: 2026-11-03T15:17:31.953

CVSS

8.6

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

SurrealDB from 3.1.0 before 3.3.0 contains an improper authentication vulnerability where the MCP BoundSubject fingerprint uses the access method name instead of per-user identity for JWT/Bearer access. Attackers with a valid low-privilege token for the same access method and a victim's mcp-session-id can hijack the session and execute MCP tools with the victim's roles and permissions.

Sources

• CVE-2026-121419
• Original advisory
• Original advisory