CVE-2026-86114

Name of the Vulnerable Software and Affected Versions Arcane versions prior to 2.0.0

Description Insufficient restrictions on template operations allow accounts with the default user role to create, modify, and delete compose templates, including instance-wide defaults. This allows for the injection of malicious container configurations featuring privileged settings or host path mounts, which execute with administrative privileges when deployed by administrators.

Recommendations Update to version 2.0.0 or later.