PT-2026-76951 · Arcadedb · Arcadedb
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
ArcadeDB versions prior to 26.8.1
Description
The Redis wire-protocol plugin lacks proper authentication, allowing unauthenticated attackers to connect to the Redis port. This enables the execution of arbitrary commands against any database on the server to read, write, and delete data, effectively bypassing all security gates.
Recommendations
Update to version 26.8.1 or later.
Exploit
Fix
Missing Authentication
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Arcadedb