CVE-2026-108710

MediumCVSS 6.5

Published: 11/10/2026(UTC)Updated: 16/10/2026(UTC)Translated: 11/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.35%

27th percentile - higher than 27% of all known CVEs

Summary

NornicDB through 1.4.1 contains a missing authorization vulnerability that allows authenticated users to bypass per-database read restrictions on the /nornicdb/search and /nornicdb/similar endpoints. Viewer-role users allowlisted for a database but denied read can submit search queries or node IDs to retrieve node IDs, labels and full property maps.

Risk Assessment

The risk is unauthorized access to database data, potentially leading to disclosure of sensitive information or violation of access control policies.

Recommendation

It is recommended to immediately upgrade NornicDB to a version newer than 1.4.1 and implement application-level authorization checks to enforce permissions on all endpoints.

Other vulnerabilities in NornicDB

CVE-2026-42072Critical
In versions prior to 1.0.42-hotfix, the CLI flag --address and the NORNICDB_ADDRESS configuration were not correctly passed to the Bolt server configuration, resulting in the server always listening on all interfaces. This exposes the graph database to the local network with default admin:password credentials.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS