Skip to content
OpenAdvisories

Vendor

getarcaneapp

13 known vulnerabilities.

Products

arcane 13
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-23520 Public exploit

    Arcane has a Command Injection in Arcane Updater Lifecycle Labels Enables RCE

    Arcane provides modern docker management. Prior to 1.13.0, Arcane has a command injection in the updater service. Arcane’s updater service supported lifecycle labels com.getarcaneapp.arcane.lifecycle.pre-update and com.getarcaneapp.arcane.lifecycle.post-updat…

    getarcaneapp arcane github.com/getarcaneapp/arcane/backend Go