ArcadeDB CVE-2026-76225

Exploitation requires an authenticated ArcadeDB session with sufficient database privileges to execute OpenCypher LOAD CSV queries - corresponding to PR:L in the CVSS 4.0 vector. No special server configuration or non-default feature enablement is required beyond a standard ArcadeDB deployment, as LOAD CSV is a built-in OpenCypher capability. The key limiting factor is the authentication barrier: unauthenticated access is insufficient. Impact severity is contingent on network reachability from the ArcadeDB host: cloud deployments without IMDSv2 enforcement and without egress restrictions face the highest risk (IAM credential theft), while isolated on-premises deployments with no sensitive internal HTTP services adjacent to the database host face reduced but non-zero risk. Environments with strict egress firewall controls blocking internal IP ranges substantially reduce the attack surface without eliminating the underlying vulnerability.

The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N) scores 8.3 High and accurately reflects the threat model: network-reachable, no attack complexity, low-privilege authentication required, with high confidentiality impact on both the vulnerable ArcadeDB system and subsequent systems it can reach. The SC:H component is the key risk amplifier - in cloud environments, SSRF against IMDSv1 endpoints (169.254.169.254) can yield temporary IAM credentials, enabling privilege escalation far beyond the database boundary. No EPSS data was provided and the vulnerability is absent from CISA KEV, indicating no confirmed widespread exploitation at time of analysis. The authentication requirement (PR:L) is a meaningful but limited barrier - any valid database user with query execution rights qualifies. Insider threat, compromised application service accounts, or multi-tenant deployments represent realistic entry points. Risk is substantially elevated for cloud-deployed ArcadeDB instances without IMDSv2 enforcement or strict egress controls, and substantially reduced for isolated on-premises deployments with no sensitive internal HTTP services reachable from the database host.

An authenticated ArcadeDB user with query execution rights submits a LOAD CSV query with the URL set to http://169.254.169.254/latest/meta-data/iam/security-credentials/ targeting the AWS IMDSv1 endpoint. The ArcadeDB server issues the request without validation and returns the response body containing temporary IAM role credentials directly to the attacker. No public POC has been identified, but the technique is well-documented and trivially executable by any attacker with LOAD CSV query access.