What is GHSA-57m4-3m25-xp8f?

GHSA-57m4-3m25-xp8f is a security advisory published by GitHub Security Advisories with High severity. ArcadeDB before 26.8.1 contains a server-side request forgery vulnerability in the OpenCypher...

Which CVE IDs does GHSA-57m4-3m25-xp8f cover?

GHSA-57m4-3m25-xp8f covers the following CVE IDs: CVE-2026-76225. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-57m4-3m25-xp8f?

GHSA-57m4-3m25-xp8f has a CVSS v3 base score of 7.7, published by GitHub Security Advisories.

GHSA-57m4-3m25-xp8fHighCVSS 7.7

ArcadeDB before 26.8.1 contains a server-side request forgery vulnerability in the OpenCypher...

Vendor

GitHub Security Advisories

Published

August 19, 2026

Last Modified

August 19, 2026

🔗 CVE IDs covered (1)

CVE-2026-76225 →

📋 Description

ArcadeDB before 26.8.1 contains a server-side request forgery vulnerability in the OpenCypher LOAD CSV implementation that fails to validate HTTP/HTTPS URLs. Authenticated attackers can craft LOAD CSV queries pointing to internal network addresses or cloud metadata endpoints to make the ArcadeDB server fetch and return sensitive data from restricted services.

🔗 References (4)

https://github.com/ArcadeData/arcadedb/security/advisories/GHSA-mmww-w3w3-6r86
https://nvd.nist.gov/vuln/detail/CVE-2026-76225
https://www.vulncheck.com/advisories/arcadedb-before-server-side-request-forgery-via-load-csv
https://github.com/advisories/GHSA-57m4-3m25-xp8f