highresolved
ArcadeDB MCP cluster token disclosure (CVE-2026-67357)
A settings tool returned the high-availability cluster token in cleartext, turning MCP access into full server compromise via token impersonation. CVSS 7.7, fixed in 26.7.3.
A settings tool exposed over MCP returned the high-availability cluster token in cleartext. Any client that could call the tool could read the token and impersonate a cluster node, which turns ordinary MCP access into full server compromise. The issue scored CVSS 7.7 and was fixed in ArcadeDB 26.7.3.
Takeaway
A read-only settings endpoint is a credential endpoint when it returns secrets. Keep tokens out of tool responses, and treat any MCP tool that can surface configuration as a privileged interface.
Sources
mcparcadedbcredential-disclosureCVE-2026-67357