Vulnerability in Arcane Interface for Managing Docker Containers by GetArcane

CVE-2026-96627

What is CVE-2026-96627?

The Arcane interface, designed for managing Docker containers, images, networks, and volumes, has a critical vulnerability that allows a user with delegated permissions to update user accounts, specifically the global administrator account. This occurs due to the lack of privilege verification when changing passwords. A malicious actor could exploit this flaw to gain unauthorized access by changing the global administrator's password and impersonating the admin, ultimately leading to a complete account takeover. This issue has been addressed in version 2.6.0.

References