Vulnerability · Published May 8, 2026 · Assigned by GitHub_M

CVE-2026-42072Nornicdb: Improper Network Binding in NornicDB Bolt Server allows unauthorized remote access

Critical 9.8

In plain English

A critical-severity security flaw in NornicDB from orneryd. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 38% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)0.4%top 61.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Nornicdb is a distributed low-latency, Graph+Vector, Temporal MVCC with all sub-ms HNSW search, graph traversal, and writes. Prior to version 1.0.42-hotfix, the --address CLI flag (and NORNICDB_ADDRESS / server.host config key) is plumbed through to the HTTP server correctly but never reaches the Bolt server config. The Bolt listener therefore always binds to the wildcard address (all interfaces), regardless of what the user configures. On a LAN, this exposes the graph database — with its default admin:password credentials — to any device sharing the network. This issue has been patched in version 1.0.42-hotfix.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Go	github.com/orneryd/nornicdb	1.0.42-hotfix	GHSA-2hp7-65r3-wv54
Go	github.com/orneryd/nornicdb	1.0.42-hotfix	GO-2026-4967

Affected products (as reported)

Vendor	Product	Versions
orneryd	NornicDB	< 1.0.42-hotfix

Weakness: CWE-1392 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

https://github.com/orneryd/NornicDB/security/advisories/GHSA-2hp7-65r3-wv54 x_refsource_CONFIRM
https://github.com/orneryd/NornicDB/commit/adce4f9a9fc7b6aada07c0bfa2d737cd7a6efaca x_refsource_MISC
https://github.com/orneryd/NornicDB/releases/tag/v1.0.42 x_refsource_MISC