CVE-2026-96628 | getarcaneapp Arcane up to 2.10.x Authentication Middleware /api/debug/pprof/* AuthMiddleware.managerAuth X-Arcane-Agent-Token improper authentication

SecurityVulns
Yanac

A vulnerability has been found in getarcaneapp Arcane up to 2.10.x and classified as critical. The affected element is the function AuthMiddleware.managerAuth of the file /api/debug/pprof/* of the component Authentication Middleware. Performing a manipulation of the argument X-Arcane-Agent-Token results in improper authentication.

This vulnerability is known as CVE-2026-96628. Remote exploitation of the attack is possible. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More