CVE-2026-75840CWE-1025

CVE-2026-75840

High · published August 18, 2026

CVSS v3.1

7.5

EPSS

Percentile

23.9

In the wild

Unconfirmed

What it is

ArcadeDB before 26.8.1 contains an arbitrary file read vulnerability in the GraalVM JavaScript sandbox allowlist enforcement, which uses unescaped regular expressions to validate package names. Attackers with trigger creation privileges can use Java.type() to access java.util.zip.ZipFile or java.util.jar.JarFile classes and read arbitrary files on the host system as the ArcadeDB server process.

The record

Technical detail

CVSS v3.1: 7.5 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0: 8.7 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS: 0.00314 · 23.9th percentile
Weakness: CWE-1025 · Comparison Using Wrong Factors
Published: 2026-08-18T16:19Z

References (3)

https://github.com/ArcadeData/arcadedb/security/advisories/GHSA-wx28-2265-f788 · [email protected]https://www.vulncheck.com/advisories/arcadedb-before-arbitrary-file-read-via-unescaped-regex · [email protected]https://github.com/ArcadeData/arcadedb/security/advisories/GHSA-wx28-2265-f788 · 134c704f-9b21-4f2e-91b3-4a467353bcc0

EPSS history

Timeline

18 AUG 11:19Z
ArcadeDB before 26.8.1 Arbitrary File Read via Unescaped Regex
cvelistv5