CVE-2026-23520
CRITICALArcane < 1.13.0 - Authenticated OS Command Injection via Lifecycle Label
Title source: llmExploitation Summary
EIP tracks 6 public exploits for CVE-2026-23520. PoCs published by secopssite, Augmaster, 0xzap.
AI-analyzed exploit summary This repository contains a detailed technical writeup for CVE-2026-23520, focusing on a prototype pollution vulnerability in a Node.js application. It includes a step-by-step analysis of the vulnerability, exploitation process, and patching guidance.
Description
Arcane provides modern docker management. Prior to 1.13.0, Arcane has a command injection in the updater service. Arcane’s updater service supported lifecycle labels com.getarcaneapp.arcane.lifecycle.pre-update and com.getarcaneapp.arcane.lifecycle.post-update that allowed defining a command to run before or after a container update. The label value is passed directly to /bin/sh -c without sanitization or validation. Because any authenticated user (not limited to administrators) can create projects through the API, an attacker can create a project that specifies one of these lifecycle labels with a malicious command. When an administrator later triggers a container update (either manually or via scheduled update checks), Arcane reads the lifecycle label and executes its value as a shell command inside the container. This vulnerability is fixed in 1.13.0.
Exploits (6)
This repository contains a detailed technical writeup for CVE-2026-23520, focusing on a prototype pollution vulnerability in a Node.js application. It includes a step-by-step analysis of the vulnerability, exploitation process, and patching guidance.
This repository contains a functional exploit for CVE-2026-23520, an OS command injection vulnerability in Arcane Docker Management versions prior to 1.13.0. The exploit leverages unsanitized lifecycle labels to achieve remote code execution when an admin triggers a container update.
The repository contains a functional Python exploit for CVE-2026-23520, demonstrating unauthenticated remote command execution in Arcane MCP via the /api/mcp/connect endpoint. The exploit sends a crafted JSON payload to execute a reverse shell.
This repository contains a functional exploit for CVE-2026-23520, demonstrating a command injection vulnerability in the Model Context Protocol (MCP) connect endpoint. The exploit leverages unsanitized input in the 'command' and 'args' fields to execute a reverse shell, with support for virtual host routing to bypass proxy restrictions.
This repository contains a functional exploit for CVE-2026-23520, demonstrating a command injection vulnerability in the Model Context Protocol (MCP) connect endpoint. The exploit leverages unsanitized input in the 'command' and 'args' fields to execute a reverse shell, with support for virtual host routing to bypass proxy restrictions.
This repository contains a functional Python-based exploit for CVE-2026-23520, targeting an MCP API endpoint vulnerable to remote command execution (RCE). The exploit sends a crafted JSON payload to execute a reverse shell via the `/api/mcp/connect` endpoint.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H