EUVD-2026-51987

ArcadeDB versions before 26.7.3 contain an information disclosure vulnerability in the MCP getserversettings tool that leaks the arcadedb.ha.clusterToken in cleartext. Attackers with MCP access can retrieve the cluster token and use it with X-ArcadeDB-Cluster-Token and X-ArcadeDB-Forwarded-User...

PT-2026-67330

Name of the Vulnerable Software and Affected Versions ArcadeDB versions prior to 26.7.3 Description An information disclosure issue exists in the MCP get server settings tool. This flaw allows attackers with MCP access to retrieve the arcadedb.ha.clusterToken in cleartext. By using this token alo...