Is CVE-2026-93595 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-93595 being exploited in the wild.

How severe is CVE-2026-93595?

Medium severity, with a CVSS score of 6.5, published 18 September 2026.

Which products and versions are affected?

ArcadeData ArcadeDB before 26.9.1.

Is there a fix for CVE-2026-93595?

A patch was published on 2026-09-18: Fixed in version 26.9.1 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-93595 attacked?

It is attacked over the network, in a hosted service.

Am I affected by CVE-2026-93595?

Check whether you run ArcadeData ArcadeDB at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-93595: ArcadeDB AI chat query_database tool access control bypass

CVE-2026-93595 · Severity: medium · CVSS 6.5 · Published 2026-09-18

ArcadeDB is a database server with fine-grained access controls that restrict which users can access specific data types and buckets. The AI chat assistant feature has a vulnerability that bypasses these per-type and per-bucket access controls, allowing authenticated users to read data they have been explicitly denied access to. This affects deployments that use the AI chat feature and rely on access controls to segregate data between users sharing the same database.

Technologies: ArcadeData ArcadeDB. Vendors: ArcadeData.

Quick answers

Is CVE-2026-93595 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-93595 being exploited in the wild.
How severe is CVE-2026-93595?: Medium severity, with a CVSS score of 6.5, published 18 September 2026.
Which products and versions are affected?: ArcadeData ArcadeDB before 26.9.1.
Is there a fix for CVE-2026-93595?: A patch was published on 2026-09-18: Fixed in version 26.9.1 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-93595 attacked?: It is attacked over the network, in a hosted service.
Am I affected by CVE-2026-93595?: Check whether you run ArcadeData ArcadeDB at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

This is an authorization bypass vulnerability in the ToolDispatcher.executeQuery() method used by the AI chat endpoints (/api/v1/ai/chat and /api/v1/ai/chat/stream). The tool executes database queries without binding the authenticated principal to the thread-local DatabaseContext, causing the engine's per-type and per-bucket ACL enforcement in LocalDatabase.checkPermissionsOnFile() to silently no-op. When no principal is bound, the permission check returns early without raising a SecurityException. An authenticated user can thus invoke the AI assistant to execute queries against data types or buckets they are explicitly denied at the fine-grained level, even though the same query would be rejected through normal HTTP query endpoints. The vulnerability requires the AI assistant to be configured and the attacker to be authenticated with at least database-level access. A patch is available in version 26.9.1.

Affected products

ArcadeData ArcadeDB before 26.9.1

Timeline

2026-09-18: disclosed: Published in GitHub Security Advisory GHSA-chrr-vr3p-crcc
2026-09-18: patched: Fixed in version 26.9.1

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.