CVE-2026-54077
1 advisory.
Maven/com.arcadedb:arcadedb-engine CVE-2026-54077: high 7.1
ArcadeDB: IMPORT DATABASE allows SSRF and arbitrary local file read by authenticated users
Action: Upgrade com.arcadedb:arcadedb-engine to 26.6.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 26.6.1 | - |
Fixed versions
| 26.6.1 |
Sources
- osv: GHSA-8w86-m9h8-hvqg
- https://github.com/ArcadeData/arcadedb/security/advisories/GHSA-8w86-m9h8-hvqg
- https://github.com/ArcadeData/arcadedb
- https://github.com/ArcadeData/arcadedb/releases/tag/26.6.1
CVE-2026-54077 · published · modified · JSON