CVE-2026-42072

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-42072
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-42072.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-42072
Aliases
Published
2026-05-08T15:59:42.544Z
Modified
2026-07-08T08:13:13.990706634Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
Nornicdb: Improper Network Binding in NornicDB Bolt Server allows unauthorized remote access
Details

Nornicdb is a distributed low-latency, Graph+Vector, Temporal MVCC with all sub-ms HNSW search, graph traversal, and writes. Prior to version 1.0.42-hotfix, the --address CLI flag (and NORNICDB_ADDRESS / server.host config key) is plumbed through to the HTTP server correctly but never reaches the Bolt server config. The Bolt listener therefore always binds to the wildcard address (all interfaces), regardless of what the user configures. On a LAN, this exposes the graph database — with its default admin:password credentials — to any device sharing the network. This issue has been patched in version 1.0.42-hotfix.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/42xxx/CVE-2026-42072.json",
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-1392"
    ]
}
References

Affected packages

Git / github.com/orneryd/nornicdb

Affected ranges

Type
GIT
Repo
https://github.com/orneryd/nornicdb
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
adce4f9a9fc7b6aada07c0bfa2d737cd7a6efaca
Fixed
dd46e5f9fa5b1859a59cacd610afeb2fccbf0119
Database specific 
{
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.0.42-hotfix"
        }
    ]
}

Affected versions

1.*
1.0.4-aml-preview
v1.*
v1.0.0
v1.0.1
v1.0.10
v1.0.10-hotfix
v1.0.11
v1.0.11-preview
v1.0.12
v1.0.12-hotfix
v1.0.12-preview
v1.0.13
v1.0.14
v1.0.15
v1.0.16
v1.0.17
v1.0.18
v1.0.19
v1.0.2
v1.0.20
v1.0.21
v1.0.22
v1.0.23
v1.0.24
v1.0.25
v1.0.26
v1.0.27
v1.0.28
v1.0.29
v1.0.3
v1.0.3-hotfix
v1.0.30
v1.0.31
v1.0.32
v1.0.33
v1.0.34
v1.0.35
v1.0.36
v1.0.37
v1.0.38
v1.0.39
v1.0.4
v1.0.4-hotfix
v1.0.40
v1.0.41
v1.0.42
v1.0.5
v1.0.6
v1.0.7
v1.0.8
v1.0.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-42072.json"