Arcadedb · Arcadedb · CVE-2026-75841
**Name of the Vulnerable Software and Affected Versions**
ArcadeDB versions prior to 26.8.1
**Description**
Authenticated users can cause a denial of service by exhausting server heap memory. This occurs when oversized expressions are submitted to the Cypher `range()` function with large bounds, triggering an OutOfMemoryError, which leads to temporary service degradation or unavailability.
**Recommendations**
Update to version 26.8.1 or later.
As a temporary mitigation, restrict the use of the `range()` function for authenticated users.