What is GHSA-hfh9-c87v-cv29?

GHSA-hfh9-c87v-cv29 is a security advisory published by GitHub Security Advisories with Critical severity. ArcadeDB versions before 26.8.1 contain a missing authentication vulnerability in the Redis wire...

Which CVE IDs does GHSA-hfh9-c87v-cv29 cover?

GHSA-hfh9-c87v-cv29 covers the following CVE IDs: CVE-2026-75854. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-hfh9-c87v-cv29?

GHSA-hfh9-c87v-cv29 has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

GHSA-hfh9-c87v-cv29CriticalCVSS 9.8

ArcadeDB versions before 26.8.1 contain a missing authentication vulnerability in the Redis wire...

Vendor

GitHub Security Advisories

Published

August 18, 2026

Last Modified

August 18, 2026

🔗 CVE IDs covered (1)

CVE-2026-75854 →

📋 Description

ArcadeDB versions before 26.8.1 contain a missing authentication vulnerability in the Redis wire-protocol plugin that allows unauthenticated attackers to read, write, and delete data. Attackers can connect to the Redis port and execute arbitrary commands against any database on the server without providing credentials, bypassing all security gates.

🔗 References (4)

https://github.com/ArcadeData/arcadedb/security/advisories/GHSA-m46c-jh3x-xwrp
https://nvd.nist.gov/vuln/detail/CVE-2026-75854
https://www.vulncheck.com/advisories/arcadedb-redis-wire-protocol-plugin-missing-authentication
https://github.com/advisories/GHSA-hfh9-c87v-cv29