EUVD-2026-51832
GHSA-mr73-pqgp-rqp5
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Exploitation needs any authenticated DB role so PR:L not PR:N; the Graal sandbox blocks host access, limiting C/I to SSRF/control-bypass (Low) while unbounded CPU/memory yields A:H.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
4Blast Radius
ecosystem impact- 17 maven packages depend on com.arcadedb:arcadedb-engine (8 direct, 9 indirect)
Ecosystem-wide dependent count for version 26.7.2.
DescriptionCVE.org
ArcadeDB versions before 26.7.2 fail to enforce scripting authorization checks on the SQL DEFINE FUNCTION statement with LANGUAGE js. Attackers with database access can execute arbitrary JavaScript code by submitting DEFINE FUNCTION statements, bypassing security controls intended to restrict scripting to administrators.
AnalysisAI
Scripting authorization bypass in ArcadeDB before 26.7.2 lets any authenticated database user - including read-only roles - run sandboxed JavaScript by submitting a SQL 'DEFINE FUNCTION ... LANGUAGE js' statement, defeating a control that was supposed to restrict scripting to security administrators. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an authenticated ArcadeDB account with access to the target database - any authorization level suffices, explicitly including read-only roles - plus network reachability to the HTTP command API endpoint /api/v1/command/<db>. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Signals are strong on exploitability but the raw 9.3 overstates technical impact. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker with any valid ArcadeDB database credential - even a read-only role granted for reporting - sends POST /api/v1/command/<db> with {"language":"sql","command":"DEFINE FUNCTION x.run \"<js>\" LANGUAGE js"}, then invokes it via SELECT x.run(), executing attacker-controlled JavaScript that the platform intended to allow only for security admins. Using the still-permitted IOAccess.ALL, the JS calls load(url) to pull in remote script or reach internal-only endpoints (SSRF) and can spin unbounded loops or allocations to exhaust CPU/memory. … |
| Remediation | Upgrade to ArcadeDB 26.7.2 or later, which is the vendor-released patched version (com.arcadedb:arcadedb-engine 26.7.2); the fix centralizes an assertCanExecuteUserCode(database) check invoked by every code-execution surface (DefineFunctionStatement.executeSimple, the SQLQueryEngine library-function wrapper, and DeleteFunctionStatement) for js/polyglot languages, and hardens the Graal Context with IOAccess.NONE / PolyglotAccess.NONE. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all ArcadeDB deployments and identify instances running versions prior to 26.7.2; implement enhanced monitoring for function definition statements and JavaScript execution given the public availability of exploitation techniques. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
OS command execution in ArcadeDB (arcadedb-engine) before 26.7.2 lets an authenticated user with UPDATE_SCHEMA permissio
Cross-database authorization bypass (IDOR) in ArcadeDB before 26.7.2 lets attackers read and write any database on the s
Privilege escalation in ArcadeDB before 26.7.3 allows any user holding UPDATE_SCHEMA permission to create server-wide ad
Cluster token exposure in ArcadeDB before 26.7.2 enables any authenticated user to escalate privileges to root-level adm
Permission bypass in ArcadeDB before 26.7.2 allows authenticated read-only users to execute privileged schema-mutation S
Privilege escalation in ArcadeDB before 26.7.3 allows any authenticated MCP user to fully bypass the database authorizat
Cleartext leakage of the HA cluster token in ArcadeDB's MCP get_server_settings tool allows any authenticated MCP user t
Same weakness CWE-863 – Incorrect Authorization
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today