Go/github.com/getarcaneapp/arcane/backend CVE-2026-45626: medium 6.3, EPSS 0.21%
Arcane Backend: OS Command Injection in Volume Browser ListDirectory via path query parameter
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.18.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-9mvm-4gwg-v8mp
- https://github.com/getarcaneapp/arcane/security/advisories/GHSA-9mvm-4gwg-v8mp
- https://nvd.nist.gov/vuln/detail/CVE-2026-45626
- https://github.com/getarcaneapp/arcane
CVE-2026-45626 · published · modified · JSON