CyberRota Analysis
AI-GeneratedArcadeDB versions prior to 26.7.2 are vulnerable due to improper restrictions on JavaScript trigger scripts, allowing authenticated users with UPDATE_SCHEMA permission to execute arbitrary OS commands through Java's runtime execution methods. This critical vulnerability poses a severe risk as it can lead to full system compromise. Organizations using affected versions of ArcadeDB should prioritize immediate updates to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
ArcadeDB before 26.7.2 (arcadedb-engine) allows trigger scripts to look up host classes in java.lang.* (via Java.type) because ScriptTriggerExecutor adds java.lang.* to the allowed packages. An authenticated user with UPDATE_SCHEMA permission can create a JavaScript trigger that invokes java.lang.Runtime.getRuntime().exec() (or ProcessBuilder), achieving OS command execution when the trigger fires.