getarcaneapp — Vulnerabilities & Security Advisories 9

Browse all 9 CVE security advisories affecting getarcaneapp. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Top products by getarcaneapp: arcane

CVEs 9

CVE ID	Title	CVSS	Severity	Published
CVE-2026-45625	Arcane: Missing admin authorization on git repository endpoints allows non-admin users to exfiltrate stored Git credentials and tamper with GitOps configs — arcane CWE-862	9.9	Critical	2026-05-29
CVE-2026-45626	Arcane: OS Command Injection in Volume Browser ListDirectory via path query parameter — arcane CWE-78	6.3	Medium	2026-05-29
CVE-2026-45627	Arcane: Unauthenticated reflected XSS via SVG color parameter in /api/app-images/logo enables admin account takeover — arcane CWE-79	8.2	High	2026-05-29
CVE-2026-47125	Arcane: Missing admin authorization on global variables endpoint — arcane CWE-862	8.8	High	2026-05-29
CVE-2026-47179	Arcane: Authenticated Arbitrary Host File Read via Docker Compose Include Directives in Arcane — arcane CWE-22	7.7	High	2026-05-29
CVE-2026-42461	Arcane Vulnerable to Unauthenticated Disclosure of Custom Compose Template Content (incl. `.env` secrets) — arcane CWE-862	7.5	-	2026-05-09
CVE-2026-40242	Arcane Unauthenticated SSRF with Conditional Response Reflection in Template Fetch Endpoint — arcane CWE-918	7.2	High	2026-04-10
CVE-2026-23944	Arcane allows unauthenticated proxy access to remote environments — arcane CWE-306	8.6^AI	High ^AI	2026-01-19
CVE-2026-23520	Arcane has a Command Injection in Arcane Updater Lifecycle Labels Enables RCE — arcane CWE-78	9.1	Critical	2026-01-15

This page lists every published CVE security advisory associated with getarcaneapp. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.