CVE-2026-55678 | Basekick Arc up to 26.06.1 Cluster Join messages.go JoinRequest node_id/role/raft_addr/api_addr/coord_addr improper authentication

A vulnerability described as critical has been identified in Basekick Arc up to 26.06.1. This affects the function JoinRequest of the file internal/cluster/protocol/messages.go of the component Cluster Join. The manipulation of the argument node_id/role/raft_addr/api_addr/coord_addr results in improper authentication.

This vulnerability is cataloged as CVE-2026-55678. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More