Description
ArcadeDB before 26.9.1 contains an access control bypass vulnerability in the query_database tool exposed through the AI chat endpoints. The tool executes queries without binding the authenticated principal to DatabaseContext, causing per-type and per-bucket ACL checks to silently no-op and allowing authenticated users to read data they are explicitly denied at the per-type level. Attackers can prompt the AI assistant to execute queries against restricted types or buckets to retrieve sensitive data that would be rejected through normal query endpoints.
Published: 2026-09-18
Score: 7.1 High
EPSS: < 1% Very Low
KEV: No
Impact: Access Control Bypass leading to information disclosure
Action: Apply Patch
AI Analysis

Impact

ArcadeDB versions earlier than 26.9.1 have a flaw in the query_database tool exposed through the AI chat endpoints. The tool runs queries without tying the authenticated principal to the DatabaseContext, which causes type‑level and bucket‑level ACL checks to be bypassed silently. As a result, an authenticated user may read data from types or buckets that are otherwise denied, leading to untrusted data disclosure. The weakness is a classic access control bypass (CWE‑862).

Affected Systems

The affected product is ArcadeData ArcadeDB. Any deployment running ArcadeDB versions before 26.9.1 is vulnerable.

Risk and Exploitability

The CVSS score of 7.1 classifies this as a medium severity risk. The EPSS score of 0.00286 indicates a very low but non-zero probability of exploitation. This vulnerability is not listed in the CISA KEV catalog. Attackers must authenticate and use the AI chat interface to issue a query_database command; failure to perform proper ACL checks allows them to extract sensitive data that would normally be blocked on normal query endpoints.

Generated by OpenCVE AI on September 19, 2026 at 19:33 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade ArcadeDB to version 26.9.1 or later.
  • Disable or restrict the query_database tool within the AI chat interface so that only authorized users can invoke it.
  • If upgrading immediately is not possible, block or audit AI chat endpoints to ensure that only properly validated queries are executed.

Generated by OpenCVE AI on September 19, 2026 at 19:33 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 21 Sep 2026 22:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Sat, 19 Sep 2026 01:30:00 +0000

Type Values Removed Values Added
First Time appeared Arcadedata
Arcadedata arcadedb
Vendors & Products Arcadedata
Arcadedata arcadedb

Fri, 18 Sep 2026 13:30:00 +0000

Type Values Removed Values Added
Description ArcadeDB before 26.9.1 contains an access control bypass vulnerability in the query_database tool exposed through the AI chat endpoints. The tool executes queries without binding the authenticated principal to DatabaseContext, causing per-type and per-bucket ACL checks to silently no-op and allowing authenticated users to read data they are explicitly denied at the per-type level. Attackers can prompt the AI assistant to execute queries against restricted types or buckets to retrieve sensitive data that would be rejected through normal query endpoints.
Title ArcadeDB before 26.9.1 ACL Bypass via query_database Tool
Weaknesses CWE-862
References
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'}

cvssV4_0

{'score': 7.1, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N'}

Subscriptions

Arcadedata Arcadedb
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-09-21T20:52:08.205Z

Reserved: 2026-09-18T10:59:45.138Z

Link: CVE-2026-93595

cve-icon Vulnrichment

Updated: 2026-09-21T16:22:49.168Z

cve-icon NVD

Status : Deferred

Published: 2026-09-18T14:19:10.757

Modified: 2026-09-21T21:17:18.797

Link: CVE-2026-93595

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-19T19:45:11Z

Weaknesses