{"slug": "286-surrealdb-fingerprints-and-1479-title-matches-frame-an-identity-bound-mcp", "title": "286 SurrealDB fingerprints and 1,479 title matches frame an identity-bound MCP review", "summary": "A security review of SurrealDB's MCP identity handling found 286 ZoomEye matches for the application fingerprint and 1,479 title matches on November 4, 2026, framing a candidate list rather than a vulnerability count. The review centers on CVE-2026-121419, which affects versions before 3.3.0 and involves an MCP BoundSubject identity collision for JWT or Bearer access, allowing sessions to be resumed across users sharing an authentication method. The guidance is to inventory instances internally, verify per-user binding keys, and upgrade to 3.3.0 or later while rotating signing keys and pre-fix sessions.", "body_md": "ZoomEye returned 286 matches for `app=\"SurrealDB\"` and 1,479 for `title=\"SurrealDB\"` on November 4, 2026. The counts are close enough to invite a quick conclusion and different enough to require a careful one.\n\nSurrealDB CVE-2026-121419 affects versions before 3.3.0 and involves MCP `BoundSubject` identity collision for JWT or Bearer access. A public fingerprint can help find candidate instances. It cannot show whether MCP is enabled, which users authenticate, or whether the token binding is fixed.\n\n| Query | Matches | \n|---|---|\n| `app=\"SurrealDB\"` | 286 | \n| `title=\"SurrealDB\"` | 1,479 | \n\nThe app query completed at 2026-11-04T23:44:59Z and the title query at 2026-11-04T23:45:01Z. Both used page 1, page size 1, and `sub_type=all`. The probes completed successfully.\n\nThe title count is higher than the application fingerprint. A title may appear on documentation, a client UI, or a deployment that the fingerprint does not identify. The app count is a more specific product signal, but it still does not identify a version.\n\nThe counts support a discovery statement: SurrealDB has an indexed public footprint, and a title search finds more candidate pages than an application query. Neither number is a count of vulnerable databases.\n\nCVE-2026-121419 requires an MCP deployment with JWT or Bearer authentication and a vulnerable session-binding implementation. The external index cannot show those conditions. It cannot see the token issuer, the user identifier, the MCP tool configuration, or whether the server has been upgraded.\n\nInventory SurrealDB instances through internal configuration management first. Record the version, namespace, database, authentication methods, and MCP listener. Identify every agent or service that connects and the token or credential it uses.\n\nFor each session, confirm that the binding key includes a per-user identity. A shared method label such as `jwt` is not a principal. Verify issuer and audience checks, token expiry, and revocation behavior. Map the tools the MCP server can invoke and the data each user can reach.\n\nUpgrade to 3.3.0 or later. Rotate signing keys and active sessions created before the fix. Test two users with the same authentication method and confirm that one cannot resume the other's session.\n\nTreat the 286 application matches as a candidate list, not a vulnerability list. Resolve ownership and version through authorized systems. The 1,479 title matches may contain documentation and unrelated pages, so do not merge them into the same evidence set.\n\nThe public measurement is useful for explaining why MCP identity review matters at internet scale. It is not a substitute for checking the version and token-binding behavior of an actual database.", "url": "https://wpnews.pro/news/286-surrealdb-fingerprints-and-1479-title-matches-frame-an-identity-bound-mcp", "canonical_source": "https://dev.to/bianliang/286-surrealdb-fingerprints-and-1479-title-matches-frame-an-identity-bound-mcp-review-36pe", "published_at": "2026-11-05 00:20:17+00:00", "updated_at": "2026-11-05 00:22:30.860235+00:00", "lang": "en", "topics": ["ai-safety", "ai-agents", "agent-protocols", "ai-tools"], "entities": ["SurrealDB", "ZoomEye", "CVE-2026-121419", "MCP"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/286-surrealdb-fingerprints-and-1479-title-matches-frame-an-identity-bound-mcp", "markdown": "https://wpnews.pro/news/286-surrealdb-fingerprints-and-1479-title-matches-frame-an-identity-bound-mcp.md", "text": "https://wpnews.pro/news/286-surrealdb-fingerprints-and-1479-title-matches-frame-an-identity-bound-mcp.txt", "jsonld": "https://wpnews.pro/news/286-surrealdb-fingerprints-and-1479-title-matches-frame-an-identity-bound-mcp.jsonld"}}