Template Operation Vulnerability in Arcane by GetArcaneApp

CVE-2026-86114

What is CVE-2026-86114?

Arcane versions prior to 2.0.0 are susceptible to an authorization bypass vulnerability that allows users with default roles to create, modify, and delete critical compose templates. This flaw permits attackers to inject malicious container configurations that can lead to administrative privilege escalation when these templates are deployed. The lack of adequate restrictions on template operations poses a significant security risk, enabling unauthorized manipulation of instance-wide settings. Users are encouraged to update to version 2.0.0 or later to mitigate this risk.

References