CVE-2026-67340
1 advisory.
Maven/com.arcadedb:arcadedb-engine CVE-2026-67340: high
ArcadeDB: Trigger scripts run with java.lang.* allowed, enabling OS command execution (RCE)
Action: Upgrade com.arcadedb:arcadedb-engine to 26.7.2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 26.7.2 | - |
Fixed versions
| 26.7.2 |
Sources
- osv: GHSA-x9f9-r4m8-9xc2
- https://github.com/ArcadeData/arcadedb/security/advisories/GHSA-x9f9-r4m8-9xc2
- https://github.com/ArcadeData/arcadedb
- https://github.com/ArcadeData/arcadedb/releases/tag/26.7.2
CVE-2026-67340 · published · modified · JSON