CVE-2026-47735 | Basekick-Labs Arc up to 2026.06.0 User-SQL Validator internal/api/query.go ValidateSQLRequest privileges management

A vulnerability described as critical has been identified in Basekick-Labs Arc up to 2026.06.0. This issue affects the function ValidateSQLRequest of the file internal/api/query.go of the component User-SQL Validator. The manipulation results in improper privilege management.

This vulnerability is identified as CVE-2026-47735. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More