EUVD-2026-60604
GHSA-g47p-8vrx-p85q
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Trigger creation privilege required (PR:L); GraalVM sandbox escape to host filesystem constitutes scope change (S:C); no integrity or availability impact applies.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
3DescriptionCVE.org
ArcadeDB before 26.8.1 contains an arbitrary file read vulnerability in the GraalVM JavaScript sandbox allowlist enforcement, which uses unescaped regular expressions to validate package names. Attackers with trigger creation privileges can use Java.type() to access java.util.zip.ZipFile or java.util.jar.JarFile classes and read arbitrary files on the host system as the ArcadeDB server process.
AnalysisAI
Arbitrary file read in ArcadeDB before version 26.8.1 allows authenticated users holding trigger creation privileges to escape the GraalVM JavaScript sandbox and read any file accessible to the ArcadeDB server process on the underlying host. The sandbox allowlist enforces package name restrictions via unescaped regular expressions, which an attacker can craft to match unintended Java class names and instantiate ZipFile or JarFile to open arbitrary filesystem paths. No public exploit has been identified at time of analysis; however, the vendor-confirmed patch to 26.8.1 should be applied promptly given the high confidentiality impact and the sensitivity of files typically reachable by a database server process.
Technical ContextAI
ArcadeDB is a multi-model database that embeds the GraalVM Polyglot JavaScript runtime to support user-defined functions and triggers. To prevent sandbox escapes, it enforces an allowlist that validates which Java classes may be accessed through the Java.type() interop API by checking candidate class names against a set of permitted patterns. CWE-1025 (Comparison Using Wrong Factors) identifies the root cause: the validation patterns are unescaped regular expressions, meaning that regex metacharacters present in class names such as the dots in java.util.zip.ZipFile or java.util.jar.JarFile are treated as wildcard matchers rather than literal characters. An attacker can construct a class name string that satisfies the flawed regex check while resolving at runtime to a Java class entirely outside the permitted set. Once ZipFile or JarFile is instantiated, the attacker can open and read any file path accessible to the ArcadeDB server OS process. Affected products are identified by CPE cpe:2.3:a:arcadedata:arcadedb:*:*:*:*:*:*:*:* covering all ArcadeDB releases prior to 26.8.1.
RemediationAI
The definitive fix is to upgrade ArcadeDB to version 26.8.1 or later, which corrects the unescaped regular expression used in the GraalVM JavaScript sandbox allowlist enforcement; the vendor security advisory is available at https://github.com/ArcadeData/arcadedb/security/advisories/GHSA-wx28-2265-f788. If an immediate upgrade is not feasible, revoke trigger creation privileges from all non-essential user accounts - this eliminates the exploitation path entirely, since the sandbox bypass requires that role, though it will break any workflows that depend on user-defined triggers and must be coordinated with application owners. As a secondary hardening measure regardless of patch status, run the ArcadeDB server process under a dedicated least-privilege OS account with filesystem access scoped to only the directories ArcadeDB legitimately requires; this does not prevent the sandbox bypass but limits the blast radius of arbitrary file reads to the paths that account can reach. Neither workaround addresses the underlying regex flaw, and upgrade to 26.8.1 remains the only complete remediation.
Unauthenticated data access and manipulation in ArcadeDB before 26.8.1 arises because the Redis wire-protocol plugin exp
Privilege escalation in ArcadeDB server (versions 26.7.3 and earlier) allows a low-privileged authenticated user with re
Privilege escalation in ArcadeDB before 26.8.1 lets a low-privileged authenticated reader escalate to full server admini
Authentication bypass in ArcadeDB before 26.8.1 lets unauthenticated attackers run full CRUD operations against any data
Scripting authorization bypass in ArcadeDB before 26.7.2 lets any authenticated database user - including read-only role
Cross-database authorization bypass (IDOR) in ArcadeDB before 26.7.2 lets attackers read and write any database on the s
Remote code execution in ArcadeDB's Gremlin query engine exposes any deployment running arcadedb-gremlin through version
Cross-database authorization bypass in ArcadeDB's Gremlin wire-protocol plugin allows any authenticated server user to f
Cluster token exposure in ArcadeDB before 26.7.2 enables any authenticated user to escalate privileges to root-level adm
Privilege escalation in ArcadeDB before 26.7.3 allows any user holding UPDATE_SCHEMA permission to create server-wide ad
Remote OS command execution in ArcadeDB before 26.7.2 is reachable by authenticated schema administrators through JavaSc
Authenticated low-privilege users can read and insert TimeSeries samples in ArcadeDB deployments running versions before
Same weakness CWE-1025 – Comparison Using Wrong Factors
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today