CVE-2026-48105 | Basekick-Labs Arc up to 2026.06.0 Raft FSM fsm.go applyRegisterFile path traversal

A vulnerability classified as critical was found in Basekick-Labs Arc up to 2026.06.0. The affected element is the function applyRegisterFile of the file internal/cluster/raft/fsm.go of the component Raft FSM. Such manipulation leads to path traversal.

This vulnerability is listed as CVE-2026-48105. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More