ArcadeDB versions 26.7.3 and earlier are vulnerable to a missing authorization flaw allowing any authenticated database user to delete server-side functions via the command API.
ArcadeDB +2
vulnerability
privilege-escalation
database-security
remote-code-execution
1r
3t
1c
updated