CVE-2026-42072: Nornicdb: Improper Network Binding in NornicDB Bolt Server allows unauthorized remote access
Nornicdb is a distributed low-latency, Graph+Vector, Temporal MVCC with all sub-ms HNSW search, graph traversal, and writes. Prior to version 1.0.42-hotfix, the --address CLI flag (and NORNICDBADDRESS / server.host config key) is plumbed through to the HTTP server correctly but never reaches the Bolt server config. The Bolt listener therefore always binds to the wildcard address (all interfaces), regardless of what the user configures. On a LAN, this exposes the graph database — with its default admin:password credentials — to any device sharing the network. This issue has been patched in version 1.0.42-hotfix.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-42072?
CVE-2026-42072 is considered a high severity vulnerability due to its potential for unauthorized remote access.
How do I fix CVE-2026-42072?
To fix CVE-2026-42072, upgrade to NornicDB version 1.0.42-hotfix or later.
What is the impact of CVE-2026-42072?
The impact of CVE-2026-42072 includes unauthorized access to the NornicDB Bolt Server which can lead to data exposure.
Which versions of NornicDB are affected by CVE-2026-42072?
NornicDB versions prior to 1.0.42-hotfix are affected by CVE-2026-42072.
What type of vulnerability is CVE-2026-42072?
CVE-2026-42072 is categorized as an improper network binding vulnerability.