Vulnerability details
CVE-2026-42072
orneryd NornicDB
Nornicdb: Improper Network Binding in NornicDB Bolt Server allows unauthorized remote access
CVSS 3.1
9.8Critical
Official description
Nornicdb is a distributed low-latency, Graph+Vector, Temporal MVCC with all sub-ms HNSW search, graph traversal, and writes. Prior to version 1.0.42-hotfix, the --address CLI flag (and NORNICDB_ADDRESS / server.host config key) is plumbed through to the HTTP server correctly but never reaches the Bolt server config. The Bolt listener therefore always binds to the wildcard address (all interfaces), regardless of what the user configures. On a LAN, this exposes the graph database — with its default admin:password credentials — to any device sharing the network. This issue has been patched in version 1.0.42-hotfix.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 9.8Critical | 3.1 | CVEProject cvelistV5 (CNA) (GitHub_M) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| orneryd | NornicDB | < 1.0.42-hotfix | CVEProject cvelistV5 (CNA) |
References and advisories
3- https://github.com/orneryd/NornicDB/security/advisories/GHSA-2hp7-65r3-wv54 x_refsource_CONFIRM
- https://github.com/orneryd/NornicDB/commit/adce4f9a9fc7b6aada07c0bfa2d737cd7a6efaca x_refsource_MISC
- https://github.com/orneryd/NornicDB/releases/tag/v1.0.42 x_refsource_MISC
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-05-08
- Last updated
- 2026-05-12
- State
- Published
- Assigner (CNA)
- GitHub_M
Exploit prediction (EPSS)
0.44%
Probability of exploitation in 30 days
38.3%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- Yes
- Exploitation
- None
- Technical impact
- Total
Weaknesses (CWE)
- CWE-1392Use of Default Credentials