Vulnerabilities

TI-2026-46909 CVE-2026-65831

ArcadeDB: Privilege escalation via reader role in /api/v1/command JS scripting language — arbitrary host file read

LOW 35

ArcadeDB is a Multi-Model DBMS.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00598 Published 2026-09-15 Fixed in 26.7.1 CWE-269

TI-2026-39007 CVE-2026-54077 · GHSA-8w86-m9h8-hvqg

LOW 32

ArcadeDB is a Multi-Model DBMS.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00447 Published 2026-09-15 Fixed in 26.6.1 CWE-22

TI-2026-39006 CVE-2026-54076 · GHSA-vg6x-6pg9-6qwg

LOW 38

ArcadeDB is a Multi-Model DBMS.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00504 Published 2026-09-15 Fixed in 26.6.1 CWE-862