CVE-2026-93595

ArcadeDB before 26.9.1 contains an access control bypass in the query_database tool exposed through AI chat endpoints. The root cause is that the tool executes queries without binding the authenticated principal to DatabaseContext , causing per-type and per-bucket ACL checks to silently no-op. Th...