Advisories · Technology
Basekick-Labs arc.
Every CVE that names Basekick-Labs arc among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.3 High
Arc Enterprise cluster replication accepts unauthenticated MsgReplicateSync messages, enabling cluster-wide data injection from any TLS-trusted peer
- Basekick-Labs arc
- Authentication bypass
- CWE-345
- CVSS 8.3 High
Arc Enterprise cluster FSM applyRegisterFile accepts arbitrary file paths without validation, enabling cluster-wide path-traversal worm primitive
- Basekick-Labs arc
- Path traversal
- CWE-345