Threats tagged 'ghsa-7qj8-rw8h-hhxv'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.7	EPSS 0.4%	CVE-2026-67357ArcadeData arcadedb · Information Exposure High7.7EPSS 0.4%2026-08-02CVE Database V5CVE-2026-67357 ArcadeDB versions before 26.7.3 contain an information disclosure vulnerability in the MCP get_server_settings tool that leaks the arcadedb.ha.clusterToken in cleartext. Attackers with MCP access can retrieve the cluster token and use it with X-ArcadeDB-Cluster-Token and X-ArcadeDB-Forwarded-User headers to impersonate root and achieve full server compromise. EPSS 0.4%Vulnerability #ghsa-7qj8-rw8h-hhxv	CVE Database V5	2026-08-02

Page 1 of 1