CVE-2026-93595: Missing Authorization in ArcadeData arcadedb
ArcadeDB before 26.9.1 contains an access control bypass vulnerability in the query_database tool exposed through the AI chat endpoints. The tool executes queries without binding the authenticated principal to DatabaseContext, causing per-type and per-bucket ACL checks to silently no-op and allowing authenticated users to read data they are explicitly denied at the per-type level. Attackers can prompt the AI assistant to execute queries against restricted types or buckets to retrieve sensitive data that would be rejected through normal query endpoints.
AI Analysis
Technical Summary
CVE-2026-93595 describes an access control bypass in ArcadeDB prior to version 26.9.1. The issue arises because the query_database tool exposed via AI chat endpoints executes queries without associating the authenticated principal with the DatabaseContext. This omission causes per-type and per-bucket ACL checks to be bypassed silently, allowing authenticated users to access restricted data. Attackers can exploit this by instructing the AI assistant to run queries against types or buckets that should be inaccessible, thereby retrieving sensitive information that normal query endpoints would block.
Potential Impact
Authenticated users with low privileges can bypass type-level and bucket-level access controls to read sensitive data they are explicitly denied under normal query operations. This leads to unauthorized data disclosure within the affected ArcadeDB instances.
Mitigation Recommendations
A fix is available in ArcadeDB version 26.9.1. Users should upgrade to version 26.9.1 or later to remediate this vulnerability. No additional mitigation steps are indicated in the provided data.
CVE-2026-93595: Missing Authorization in ArcadeData arcadedb
Description
ArcadeDB before 26.9.1 contains an access control bypass vulnerability in the query_database tool exposed through the AI chat endpoints. The tool executes queries without binding the authenticated principal to DatabaseContext, causing per-type and per-bucket ACL checks to silently no-op and allowing authenticated users to read data they are explicitly denied at the per-type level. Attackers can prompt the AI assistant to execute queries against restricted types or buckets to retrieve sensitive data that would be rejected through normal query endpoints.
CVSS v4.0
Score 7.1high
Affected software
ArcadeData
arcadedb
pkg:github/arcadedata/arcadedbRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-93595 describes an access control bypass in ArcadeDB prior to version 26.9.1. The issue arises because the query_database tool exposed via AI chat endpoints executes queries without associating the authenticated principal with the DatabaseContext. This omission causes per-type and per-bucket ACL checks to be bypassed silently, allowing authenticated users to access restricted data. Attackers can exploit this by instructing the AI assistant to run queries against types or buckets that should be inaccessible, thereby retrieving sensitive information that normal query endpoints would block.
Potential Impact
Authenticated users with low privileges can bypass type-level and bucket-level access controls to read sensitive data they are explicitly denied under normal query operations. This leads to unauthorized data disclosure within the affected ArcadeDB instances.
Mitigation Recommendations
A fix is available in ArcadeDB version 26.9.1. Users should upgrade to version 26.9.1 or later to remediate this vulnerability. No additional mitigation steps are indicated in the provided data.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-09-18T10:59:45.138Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6aad3d5b55bf5e2cf51004f1
Added to database: 09/18/2026, 13:32:11 UTC
Last enriched: 09/18/2026, 13:47:06 UTC
Last updated: 09/19/2026, 01:18:42 UTC
Views: 9
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.