Vesoft vulnerabilities
We track 1 vulnerability in Vesoft products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 26, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Vesoft vulnerabilities
- 9.8 Critical severity
nebula: Missing Authentication for Critical Functionality
NebulaGraph exposes its runtime configuration over an unauthenticated HTTP service. Each daemon starts the web service defined in src/webservice/WebService.cpp, whose bind address defaults to all interfaces, and registers routes for reading and writing gflags