CyberRota Analysis
AI-GeneratedArcadeDB versions prior to 26.8.1 are vulnerable due to a failure to enforce SASL authentication on data commands within the MongoDB wire-protocol plugin. This critical flaw allows unauthenticated attackers to execute various database commands, including insert, find, update, delete, and create, by simply connecting to port 27017. Organizations using affected versions of ArcadeDB should prioritize immediate updates to mitigate the risk of unauthorized data manipulation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
ArcadeDB versions before 26.8.1 fail to enforce SASL authentication on data commands in the MongoDB wire-protocol plugin. Unauthenticated attackers can issue insert, find, update, delete, and create commands against any database by connecting to port 27017 without credentials.