CyberRota Analysis
AI-GeneratedArcadeDB versions prior to 26.7.2 are vulnerable due to inadequate enforcement of the UPDATE_SCHEMA permission, allowing authenticated users with read-only access to execute ALTER TYPE statements that modify custom schema metadata and bucket selection strategies. This could lead to schema corruption and improper record routing, posing a risk to data integrity. Organizations using ArcadeDB should prioritize this vulnerability to prevent unauthorized schema alterations and ensure proper access controls.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
ArcadeDB before 26.7.2 fails to enforce the UPDATE_SCHEMA database permission on the ALTER TYPE ... CUSTOM and ALTER TYPE ... BUCKETSELECTIONSTRATEGY SQL operations, which map to setCustomValue and setBucketSelectionStrategy in LocalDocumentType. An authenticated user with only read access (e.g., a read-only API token) can submit these ALTER TYPE statements via the HTTP command endpoint to mutate a type's custom schema metadata and bucket-selection strategy, bypassing the documented updateSchema permission boundary and potentially corrupting schema metadata and record routing.