{"affected":[{"defaultStatus":"unaffected","ecosystem":"cargo","packageName":"surrealdb","product":"surrealdb","source":"CNA: VulnCheck","vendor":"surrealdb","versions":[{"lessThan":"3.3.0","status":"affected","version":"3.1.0","versionType":"semver"},{"status":"unaffected","version":"3.3.0","versionType":"semver"}]}],"cveId":"CVE-2026-121419","cwes":["CWE-269"],"description":"SurrealDB from 3.1.0 before 3.3.0 contains an improper authentication vulnerability where the MCP BoundSubject fingerprint uses the access method name instead of per-user identity for JWT/Bearer access. Attackers with a valid low-privilege token for the same access method and a victim's mcp-session-id can hijack the session and execute MCP tools with the victim's roles and permissions.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":8.6,"severity":"high","source":"CNA: VulnCheck","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","version":"4.0"},{"score":8.1,"severity":"high","source":"CNA: VulnCheck","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","version":"3.1"}],"modifiedAt":1793716096612,"publishedAt":1793716096612,"references":[{"source":"CNA: VulnCheck","tags":["vendor-advisory"],"url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-pgh9-49q4-hqcx"},{"source":"CNA: VulnCheck","tags":["third-party-advisory"],"url":"https://www.vulncheck.com/advisories/surrealdb-3.1.0-before-3.3.0-mcp-session-hijack-via-boundsubject-collision"}],"remediation":[],"revision":"c10c1df8bb44e75920d53e19bc45c04268a7d5e391a4039e8cfae2b62d9b504f","sources":[{"modifiedAt":1793716096612,"name":"CNA: VulnCheck","retrievedAt":1793718567184,"url":"https://www.cve.org/CVERecord?id=CVE-2026-121419"}],"ssvc":null,"status":"published","title":"SurrealDB 3.1.0 before 3.3.0 MCP Session Hijack via BoundSubject Collision","updatedAt":1793718567184}