CVE-2026-75846 ArcadeDB before 26.8.1 Unauthorized Function Deletion via DELETE FUNCTION

ArcadeDB before 26.8.1 affected versions = 26.7.3 contains a missing authorization vulnerability in the DELETE FUNCTION SQL statement. DeleteFunctionStatement.executeSimple unregisters and persists deletion of a server-side function without any checkPermissionsOnDatabase UPDATESCHEMA check. Any...

PT-2026-76946

Name of the Vulnerable Software and Affected Versions ArcadeDB versions prior to 26.8.1 Description A missing authorization issue exists in the DELETE FUNCTION SQL statement. The DeleteFunctionStatement.executeSimple function unregisters and persists the deletion of a server-side function without...