ArcadeDB versions 26.4.2 through 26.7.3 contain an authorization bypass flaw in the set_server_setting MCP server‑level tool. The tool’s execute() method checks only the global allowAdmin flag and ignores the caller’s role, so any authenticated read‑only user can call set_server_setting on a server where allowAdmin is true and allowedUsers does not include root. This flaw allows an attacker to modify global configuration values, potentially leading to unauthorized configuration tampering or denial of service. The weakness is a classic example of improper privilege management (CWE‑269).

ArcadeData ArcadeDB, products 26.4.2–26.7.3, in MCP deployments that have allowAdmin set to true and non‑root allowedUsers. The vulnerability is corrected in version 26.8.1 and later.

The CVSS score of 5.3 indicates a medium severity vulnerability. EPSS data is not available, so the exploitation probability is uncertain, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is a legitimate, authenticated read‑only session on an MCP deployment; the attacker needs only to send an appropriate set_server_setting command. Once executed, the attacker can change server configuration or cause a denial of service. Overall, the risk is moderate but should be addressed promptly in environments that meet the described deployment conditions.