CVE-2026-55098 | Basekick-Labs Arc up to 26.06.1 Query Permission Check internal/api/query.go checkQueryPermissions authorization

October 30, 2026 Yanac

A vulnerability identified as problematic has been detected in Basekick-Labs Arc up to 26.06.1. This issue affects the function checkQueryPermissions of the file internal/api/query.go of the component Query Permission Check. The manipulation leads to authorization bypass.

This vulnerability is traded as CVE-2026-55098. It is possible to initiate the attack remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More