CyberSecBulletin

Arc53 vulnerabilities

We track 2 vulnerabilities in Arc53 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 29, 2026.

2vulnerabilities
2critical
0high
0exploited
9.6average CVSS score

Latest Arc53 vulnerabilities

  • 9.8 Critical severity

    DocsGPT: Improper Neutralization of Special Elements used in a Command

    CVE-2026-26015Arc53EPSS 1.17%

    DocsGPT is a GPT-powered chat for documentation. From version 0.15.0 to before version 0.16.0, an attacker accessing both the official DocsGPT website or any local and public deployment, can craft a malicious payload bypassing the "MCP test" behavior to achiev

  • 9.3 Critical severity

    DocsGPT: Improper Neutralization of Directives in Dynamically Evaluated Code

    CVE-2025-0868Arc53EPSS 17.1%

    A vulnerability, that could result in Remote Code Execution (RCE), has been found in DocsGPT. Due to improper parsing of JSON data using eval() an unauthorized attacker could send arbitrary Python code to be executed via /api/remote endpoint.. This issue affec