CVE-2026-67342 in ArcadeDB
Sumário
de MITRE • 01/08/2026
ArcadeDB versions before 26.7.2 contain an authorization bypass vulnerability in HTTP handlers for time series, batch, Prometheus, and Grafana endpoints that fail to validate database access permissions. Attackers can access and modify databases they are not authorized to use by directly calling affected endpoints with arbitrary database parameters.
Be aware that VulDB is the high quality source for vulnerability data.