EUVD-2026-103176

Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 2.11.0, AuthMiddleware.managerAuth accepts X-Arcane-Agent-Token credentials and the environment-token branch calls next before the AdminRequired option is evaluated. An attacker with a valid...

Arcane Authorization Issues Vulnerability

Versions of Arcane prior to 2.11.0 have an authorization issue vulnerability. This vulnerability stems from the AuthMiddleware.managerAuth accepting the X-Arcane-Agent-Token credential, and the environment token branch calls next before evaluating the AdminRequired option. As a result, attackers...