ArcadeDB versions before 26.7.1 contain a privilege management flaw where the PolyglotQueryEngine methods (command, analyze, registerFunctions) do not enforce administrator-level authorization, allowing reader-role users to submit JavaScript commands via POST /api/v1/command/{database}. Additionally, the GraalPolyglotEngine permits scripts to bypass the allowedPackages whitelist by reflecting through the database object's class loader to load arbitrary host classes. This combination allows read-only users to read arbitrary host files outside the database context. Although process creation is blocked, preventing OS command execution, the vulnerability exposes sensitive host files. This issue is distinct from other CVEs affecting ArcadeDB and is resolved in version 26.7.1.

An attacker with read-only database privileges can exploit this vulnerability to read arbitrary files on the host system outside the database environment. This can lead to unauthorized disclosure of sensitive information. There is no confirmed ability to execute OS commands or create processes, limiting the impact to confidentiality. The vulnerability affects the integrity and confidentiality of the host system's data accessible via file reads.

This vulnerability is fixed in ArcadeDB version 26.7.1. Users should upgrade to version 26.7.1 or later to remediate this issue. No additional mitigations are required once the upgrade is applied.