CVE-2026-119577
6.8 MEDIUMpublic exploit availablePublished 2026-10-30 · Updated 2026-10-30
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
ArcadeDB before 26.10.2 contains an improper authorization vulnerability that allows revoked users to retain access through already-open Postgres, Bolt, MongoDB, or Redis wire-protocol connections. Attackers holding an existing connection can keep reading and writing data after deletion, grant removal, or password rotation, because executors keep a stale ServerSecurityUser.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
Weaknesses
CWE-613
Public exploit & PoC references
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- MEDIUMCVE-2024-8122
- UNSCOREDCVE-2025-0326
- MEDIUMCVE-2025-13173
- MEDIUMCVE-2025-36069
- MEDIUMCVE-2025-36252
- MEDIUMCVE-2025-71435PoC
- MEDIUMCVE-2026-100502PoC
- MEDIUMCVE-2026-100554PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.