nebula vulnerabilities

1 known vulnerability in nebula from Vesoft. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  nebula: Missing Authentication for Critical Functionality

  CVE-2026-81032Aug 26, 2026Vesoft

  NebulaGraph exposes its runtime configuration over an unauthenticated HTTP service. Each daemon starts the web service defined in src/webservice/WebService.cpp, whose bind address defaults to all interfaces, and registers routes for reading and writing gflags