CVE-2026-75841 is a denial of service vulnerability in ArcadeDB prior to version 26.8.1. It arises from the Cypher range() function allowing authenticated users to allocate resources without limits or throttling. By submitting oversized range() expressions with large bounds, attackers can exhaust the server's heap memory, causing an OutOfMemoryError and resulting in temporary service degradation or unavailability. The vulnerability requires authentication and does not involve user interaction or complex attack vectors.

Successful exploitation allows authenticated users to cause a denial of service by exhausting server heap memory, leading to temporary degradation or unavailability of the ArcadeDB service. There is no indication of data corruption, privilege escalation, or remote code execution from the provided information.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, limit access to authenticated users and monitor for unusual usage of the Cypher range() function to reduce risk.