What’s Vulnerable › Vulnerabilities

CVE-2026-108710: NornicDB through 1.4.1 Missing Authorization via Vector Search Endpoints

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-11 · updated 2026-10-16
• Weakness: CWE-862

Description

NornicDB through 1.4.1 contains a missing authorization vulnerability that allows authenticated users to bypass per-database read restrictions on the /nornicdb/search and /nornicdb/similar endpoints. Viewer-role users allowlisted for a database but denied read can submit search queries or node IDs to retrieve node IDs, labels and full property maps.

Affected products

• orneryd NornicDB: through 1.4.1

References

• https://github.com/orneryd/NornicDB
• https://github.com/orneryd/NornicDB/blob/67105489e6da00714b998faf9012ffa44f526245/pkg/server/server_graph.go#L418-L423
• https://github.com/orneryd/NornicDB/blob/67105489e6da00714b998faf9012ffa44f526245/pkg/server/server_nornicdb.go#L415-L419
• https://github.com/orneryd/NornicDB/blob/67105489e6da00714b998faf9012ffa44f526245/pkg/server/server_nornicdb.go#L811-L815
• https://hackmd.io/@haind/orneryd-nornicdb-vector-endpoints-per-db-read-bypass
• https://www.vulncheck.com/advisories/nornicdb-through-1.4.1-missing-authorization-via-vector-search-endpoints
• https://hackmd.io/@haind/orneryd-nornicdb-vector-endpoints-per-db-read-bypass

Get alerted when CVE-2026-108710 or the next vulnerability affects your stack