CVE-2026-96626 | getarcaneapp Arcane up to 2.4.x Container Registry Service container_registry_service.go normalizeRegistryServerAddressInternal information disclosure

October 16, 2026 Yanac

A vulnerability, which was classified as problematic, was found in getarcaneapp Arcane up to 2.4.x. Impacted is the function normalizeRegistryServerAddressInternal of the file backend/api/services/container_registry_service.go of the component Container Registry Service. Such manipulation leads to information disclosure.

This vulnerability is traded as CVE-2026-96626. The attack may be launched remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More