CVE-2026-42072 json
Nornicdb: Improper Network Binding in NornicDB Bolt Server allows unauthorized remote access
published 2026-04-22 6 mo ago modified 2026-10-26 13 d ago also GHSA-2hp7-65r3-wv54 , GO-2026-4967 , EUVD-2026-28808
- cvss
- 9.8
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.4%
- EPSS 0.4% chance of exploitation in 30 days, percentile 38%
- public exploits
- 0
- none known
Summary
Nornicdb is a distributed low-latency, Graph+Vector, Temporal MVCC with all sub-ms HNSW search, graph traversal, and writes. Prior to version 1.0.42-hotfix, the --address CLI flag (and NORNICDB_ADDRESS / server.host config key) is plumbed through to the HTTP server correctly but never reaches the Bolt server config. The Bolt listener therefore always binds to the wildcard address (all interfaces), regardless of what the user configures. On a LAN, this exposes the graph database — with its default admin:password credentials — to any device sharing the network. This issue has been patched in version 1.0.42-hotfix.
Patch / fix
- go github.com/orneryd/nornicdb 1.0.42-hotfix
- govulncheck-vulndb openSUSE Leap 16.0 0.0.20260723T184607-160000.1.1
opensuse advisories openSUSE-SU-2026:21483-1
CISA SSVC
- Exploitation
- none
- Automatable
- yes
- Technical impact
- total
- Assessed
- 5 mo ago
Exploit prediction
0.44% chance of exploitation in the next 30 days, higher than 38% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| GitHub | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| go | github.com/orneryd/nornicdb | <1.0.42-hotfix |
1.0.42-hotfix |
Affected products
- orneryd NornicDB
Classification
- Weakness
-
- CWE-1392 Use of Default Credentials
References
-
github.com
/orneryd/NornicDB/commit/adce4f9a9fc7b6aada07c0bfa2d737cd7a6efaca
web
-
github.com
/orneryd/NornicDB/security/advisories/GHSA-2hp7-65r3-wv54
web, advisory
-
github.com
/orneryd/NornicDB/releases/tag/v1.0.42
web
-
nvd.nist.gov
/vuln/detail/CVE-2026-42072
advisory
-
github.com
/orneryd/NornicDB
package
-
github.com
/orneryd/NornicDB/releases/tag/v1.0.42-hotfix
web
Sources
- CVE List CVE-2026-42072
- GitHub Advisory GHSA-2hp7-65r3-wv54
- NVD CVE-2026-42072
- OSV GO-2026-4967
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.