CVE-2026-93595 Details

An access control bypass vulnerability has been identified in ArcadeDB versions prior to 26.9.1. This vulnerability exists in the 'query_database' tool, which is accessed through the AI chat endpoints. The issue arises because the tool executes queries without properly binding the authenticated user to the 'DatabaseContext'. As a result, the fine-grained access control lists (ACLs) that are supposed to regulate access on a per-type and per-bucket basis fail to function, allowing authenticated users to access data they are explicitly denied at the per-type level. Attackers can exploit this by prompting the AI assistant to execute queries on restricted types or buckets, thereby retrieving sensitive information that would normally be blocked through standard query channels.

Users are advised to update ArcadeDB to version 26.9.1 or later, where this vulnerability has been patched.