EUVD-2026-103175

Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 2.5.0, UpdateRegistry and TestRegistry in backend/api/services/containerregistryservice.go allow the registry URL to change while preserving the stored encrypted token. When a holder of registries:updat...

CVE-2026-96626

The Arcane container management interface is vulnerable to credential exfiltration in versions prior to 2.5.0 . The root cause lies in UpdateRegistry and TestRegistry within backend/api/services/container_registry_service.go, which allow a registry URL to be changed while preserving an existing e...