Vulnerability in Nornicdb Graph Database Allows Unauthorized Access to All Interfaces

⚠️ CVE-Referenzen: CVE-2026-42072
Orneryd - Nornicdb - CRITICAL - CVE-2026-42072. The Nornicdb graph database contains a vulnerability that allows the Bolt listener to bind to all network interfaces, exposing the service to unauthorized access on local networks. This occurs due to the misconfiguration of the --address CLI flag, which fails to correctly apply user settings to the Bolt server configurations. As a result, devices on the same network can gain access to the database with default admin credentials. Users are encouraged to upgrade to version 1.0.42-hotfix to mitigate this security risk.
Quelle: securityvulnerability.io