These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
ArcadeDB before 26.7.2 fails to enforce the UPDATE_SCHEMA database permission on the ALTER TYPE ... CUSTOM and ALTER TYPE ... BUCKETSELECTIONSTRATEGY SQL operations. An authenticated user with only read access can submit these ALTER TYPE statements via the HTTP command endpoint to mutate a type's custom schema metadata and bucket-selection strategy, bypassing the documented updateSchema permission boundar [truncated]
ArcadeDB versions before 26.7.2 have a vulnerability where the cluster token is not properly redacted in the GET /api/v1/server endpoint. This allows authenticated users to retrieve the arcadedb.ha.clusterToken value in cleartext. The leaked token can be used with specific headers to impersonate root and execute administrative actions. Affected systems may face potential elevation of privileges, unauthori [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-01T13:17:05.417Z and has not been modified since then. The authorization bypass vulnerability in ArcadeDB versions before 26.7.2 could allow attackers to access and modify databases they are not authorized to use. This vulnerability is considered critical, with a CVSS score of 9.3. Organizations usi [truncated]
ArcadeDB versions before 26.7.2 are vulnerable to an authorization bypass due to a failure in enforcing scripting authorization checks on SQL DEFINE FUNCTION statements with LANGUAGE js. This allows attackers with database access to execute arbitrary JavaScript code, potentially leading to unauthorized code execution and data breaches. The CVE record was published on 2026-08-01T13:17:05.273Z and has not b [truncated]
ArcadeDB before 26.7.2 has a vulnerability allowing trigger scripts to look up host classes in java.lang.* via Java.type. An authenticated user with UPDATE_SCHEMA permission can create a JavaScript trigger that invokes java.lang.Runtime.getRuntime().exec() or ProcessBuilder, achieving OS command execution when the trigger fires. This vulnerability allows for potential code execution on affected systems. U [truncated]