{"id":"CVE-2026-119576","kind":"vulnerability","aliases":["CVE-2026-119576"],"related":[],"title":"ArcadeDB: read-only users can replace shared GraphQL schema and alter results","description":"ArcadeDB from 21.12.1 before 26.10.2 contains an authorization bypass vulnerability that allows users with only readRecord to replace the shared GraphQL schema via the read-only query endpoint. Attackers can send a GraphQL type definition with a crafted @sql directive to /api/v1/query/{database}, altering query results returned to other users including administrators.","summary":"ArcadeDB versions from 21.12.1 before 26.10.2 let a user with only read-record permission replace the shared GraphQL schema through the read-only query endpoint. That lets the attacker alter query results returned to other users, including administrators.","severity":"medium","cvss":5.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["arcadedb","graphql","package","self-hosted"],"not_affected_if":["default-config","single-trusted-user"],"how_to_check":"- Check the installed ArcadeDB version and confirm whether it is below `26.10.2`\n- Look for the GraphQL schema replacement path at `/api/v1/query/{database}` in access logs for requests carrying a GraphQL type definition with an `@sql` directive","fix":"- Move ArcadeDB to `26.10.2` or later","status":"open","published_at":"2026-10-30T14:16:46+00:00","first_seen_at":"2026-10-30T14:30:54+00:00","triaged_at":"2026-10-30T14:32:58+00:00","updated_at":"2026-10-30T14:32:58+00:00","category":"package","confidence":0.7,"triage":{"at":"2026-10-30T14:32:58Z","model":"claude-haiku-5-5","output":{"fix":"- Move ArcadeDB to `26.10.2` or later","reach":"network","title":"ArcadeDB: read-only users can replace shared GraphQL schema and alter results","impact":"medium","summary":"ArcadeDB versions from 21.12.1 before 26.10.2 let a user with only read-record permission replace the shared GraphQL schema through the read-only query endpoint. That lets the attacker alter query results returned to other users, including administrators.","audience":"businesses","category":"package","nicknames":[],"who_cares":["arcadedb","graphql","self-hosted"],"confidence":0.7,"fix_status":"available","needs_auth":"yes","worst_case":"Attacker alters query results seen by other users and administrators","analyst_note":"","how_to_check":"- Check the installed ArcadeDB version and confirm whether it is below `26.10.2`\n- Look for the GraphQL schema replacement path at `/api/v1/query/{database}` in access logs for requests carrying a GraphQL type definition with an `@sql` directive","plain_action":"","needs_analyst":false,"not_affected_if":["default-config","single-trusted-user"],"who_is_affected":"Teams that run ArcadeDB 21.12.1 through 26.10.1 with users who hold read-record permission on a shared database. Exposure depends on whether untrusted or low-privilege accounts can reach the query endpoint. Deployments with only fully trusted accounts face less risk but should still upgrade.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000688,"input_tokens":4155,"output_tokens":546,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-119576':16A,19A '-2026':15A,18A '/api/v1/query':108C '21.12.1':29B,68C '26.10.2':31B,70C 'administr':65B,118C 'allow':77C 'alter':12A,57B,110C 'arcadedb':1A,20B,26B,66C 'attack':56B,95C 'author':73C 'bypass':74C 'contain':71C 'craft':104C 'cve':14A,17A 'databas':109C 'definit':101C 'direct':106C 'endpoint':52B,94C 'graphql':9A,21B,44B,86C,99C 'host':25B 'includ':64B,117C 'let':32B,54B 'packag':22B 'permiss':40B 'queri':51B,58B,93C,111C 'read':3A,38B,49B,91C 'read-on':2A,48B,90C 'read-record':37B 'readrecord':81C 'record':39B 'replac':7A,41B,83C 'result':13A,59B,112C 'return':60B,113C 'schema':10A,45B,87C 'self':24B 'self-host':23B 'send':97C 'share':8A,43B,85C 'sql':105C 'type':100C 'user':5A,34B,63B,78C,116C 'version':27B 'via':88C 'vulner':75C","nicknames":[],"mitigations":[],"who_affected":"Teams that run ArcadeDB 21.12.1 through 26.10.1 with users who hold read-record permission on a shared database. Exposure depends on whether untrusted or low-privilege accounts can reach the query endpoint. Deployments with only fully trusted accounts face less risk but should still upgrade.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"first_public_at":"2026-10-30T14:16:46+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-119576","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119576","severity":null,"published_at":"2026-10-30T14:16:46+00:00","modified_at":"2026-10-30T14:16:47+00:00","first_seen_at":"2026-10-30T14:30:54+00:00","fetched_at":"2026-10-30T14:30:54+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}