CVE-2026-47735: Arc Package Arbitrary Local File Read Vulnerability
Summary
CVE-2026-47735: Arc's user-SQL validator (internal/api/query.go:ValidateSQLRequest) blocked only read_parquet( and arc_partition_agg( via regex denylist. Affects github.com/basekick-labs/arc versions < 0.0.0-20260520141557-91bdc29d1a02. Fixed in 0.0.0-20260520141557-91bdc29d1a02. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Arc is an open-source data processing package built on top of DuckDB, designed to facilitate SQL queries and data manipulation. It provides users with the ability to perform complex data operations efficiently. However, due to insufficient validation of SQL requests, Arc is vulnerable to unauthorized file access, allowing authenticated users to read arbitrary local files.
Vulnerability Detail
The vulnerability arises from Arc's user-SQL validator, which inadequately blocks certain DuckDB I/O functions. While it restricts specific functions like 'read_parquet', it fails to account for a broader range of file-reading functions, such as 'read_csv_auto' and 'read_json'. This oversight allows authenticated users, even those with minimal permissions, to execute SQL queries that can read sensitive files from the server, including configuration files and environment variables. The vulnerability can lead to exposure of sensitive information, including API tokens and secrets.
How To Fix
Latest published version: v25.11.2+incompatible as of 22 Oct 2026
go get github.com/basekick-labs/arc@v25.11.2+incompatibleUpgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
0.0.0-20260520141557-91bdc29d1a02
This is the first release that contains the fix.
go get github.com/basekick-labs/arc@v0.0.0-20260520141557-91bdc29d1a02Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, restrict API access to trusted networks using firewall rules. Additionally, you can modify the SQL validation logic in 'internal/api/query.go' to include the following patterns in the 'dangerousSQLPattern': 'read_csv*', 'read_json*', 'glob', etc.
Conclusion
The CVE-2026-47735 vulnerability in the Arc package poses a significant risk by allowing unauthorized access to local files. It is crucial to update to the patched version to mitigate this risk. Implementing the suggested workarounds can provide temporary relief until the update is applied.
See every vulnerability recorded for github.com/basekick-labs/arc →
FAQ
CVE-2026-47735 is a vulnerability in the Arc package that allows authenticated users to read arbitrary local files due to insufficient SQL request validation.
Any authenticated user, including those with minimal permissions, can exploit this vulnerability to access sensitive files on the server.
Exploiting this vulnerability can allow access to sensitive files such as configuration files, API tokens, and environment variables.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The CVSS score of this vulnerability is 7.1, indicating a high severity level.
References
Related vulnerabilities
Recent vulnerabilities recorded for github.com/basekick-labs/arc.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.