一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月6日

CVE-2026-86114 [MEDIUM] – Arcane versions before 2.0.0 fail to properly restrict template operations, allowing defau

未分类
📑 文章目录

Arcane versions before 2.0.0 fail to properly restrict template operations, allowing default user role accounts to create, modify, and delete compose templates including instance-wide defaults. Attackers can inject malicious container configurations with privileged settings or host path mounts that execute with administrative privileges when deployed by administrators.