Is CVE-2026-47735 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-47735 being exploited in the wild.

How severe is CVE-2026-47735?

High severity, with a CVSS score of 4, published 21 August 2026.

Which products and versions are affected?

Basekick Labs Arc < 0.0.0-20260520141557-91bdc29d1a02; github.com/basekick-labs/arc (Go) < 0.0.0-20260520141557-91bdc29d1a02, SEMVER:introduced=0,fixed=0.0.0-20260520141557-91bdc29d1a02.

Is there a fix for CVE-2026-47735?

Yes. github.com/basekick-labs/arc (Go): upgrade to 0.0.0-20260520141557-91bdc29d1a02 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-47735 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-47735?

Check whether you run Basekick Labs Arc or github.com/basekick-labs/arc (Go) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-47735: Basekick Labs Arc local file read and SSRF via DuckDB functions

Q: Which products and versions are affected?

Basekick Labs Arc < 0.0.0-20260520141557-91bdc29d1a02; github.com/basekick-labs/arc (Go) < 0.0.0-20260520141557-91bdc29d1a02, SEMVER:introduced=0,fixed=0.0.0-20260520141557-91bdc29d1a02.

Q: Is there a fix for CVE-2026-47735?

Yes. github.com/basekick-labs/arc (Go): upgrade to 0.0.0-20260520141557-91bdc29d1a02 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

Q: How is CVE-2026-47735 attacked?

It is attacked over the network, in a software library.

Q: Am I affected by CVE-2026-47735?

Check whether you run Basekick Labs Arc or github.com/basekick-labs/arc (Go) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-47735 · Severity: high · CVSS 4 · Published 2026-08-21

Arc, a data processing tool, contains a vulnerability that allows any logged-in user to read sensitive files from the server's local storage. This could lead to the exposure of critical information such as database credentials, encryption keys, and environment variables. In some configurations, an attacker could also use this to access internal cloud metadata services, potentially leading to further compromise of the infrastructure.

Technologies: Basekick Labs Arc, github.com/basekick-labs/arc (Go). Vendors: Basekick Labs, Go.

Quick answers

Is CVE-2026-47735 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-47735 being exploited in the wild.
How severe is CVE-2026-47735?: High severity, with a CVSS score of 4, published 21 August 2026.
Which products and versions are affected?: Basekick Labs Arc < 0.0.0-20260520141557-91bdc29d1a02; github.com/basekick-labs/arc (Go) < 0.0.0-20260520141557-91bdc29d1a02, SEMVER:introduced=0,fixed=0.0.0-20260520141557-91bdc29d1a02.
Is there a fix for CVE-2026-47735?: Yes. github.com/basekick-labs/arc (Go): upgrade to 0.0.0-20260520141557-91bdc29d1a02 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-47735 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-47735?: Check whether you run Basekick Labs Arc or github.com/basekick-labs/arc (Go) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

github.com/basekick-labs/arc (Go): upgrade to 0.0.0-20260520141557-91bdc29d1a02 or later
```
go get github.com/basekick-labs/arc@v0.0.0-20260520141557-91bdc29d1a02
```

Technical details

The vulnerability exists in Arc's SQL validator (internal/api/query.go:ValidateSQLRequest), which utilized an incomplete regex denylist for DuckDB functions. While it blocked 'read_parquet', it failed to account for other I/O functions like 'read_csv_auto', 'read_json', and 'read_blob'. Furthermore, the RBAC engine only inspected 'FROM' and 'JOIN' clauses, allowing scalar table functions in the 'SELECT' list to bypass table-level access controls. An authenticated attacker can exploit this to read local system files (e.g., /etc/passwd, auth.db) or perform SSRF via the 'httpfs' extension. The issue is fixed in version 2026.06.1 by implementing a structural sandbox that restricts DuckDB to specific allowed directories and disables external access.

Affected products

Basekick Labs Arc < 0.0.0-20260520141557-91bdc29d1a02

Identifiers

CVE-2026-47735
GHSA-p2j4-c4g6-rpf5
GO-2026-5523

Timeline

2026-05-19: disclosed: Reported by Alex Manson
2026-05-31: advisory: Initial advisory published
2026-06-08: patched: Patch confirmed and reviewed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.