Vulnerabilities

TI-2026-56042 CVE-2026-81032 · GHSA-c937-9ccf-7mq9

NebulaGraph through 3.8.0 Unauthenticated Read and Modification of Runtime Configuration

HIGH 81

NebulaGraph exposes its runtime configuration over an unauthenticated HTTP service.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00359 Published 2026-08-26 No fix listed CWE-306

TI-2024-31572 CVE-2024-47218 · GHSA-9p6f-43f7-gmq3

MEDIUM 50

An issue was discovered in vesoft NebulaGraph through 3.8.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00582 Published 2024-09-22 No fix listed CWE-287

TI-2024-31573 CVE-2024-47219 · GHSA-2gm9-phpp-rvm3

MEDIUM 51

An issue was discovered in vesoft NebulaGraph through 3.8.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01202 Published 2024-09-21 No fix listed CWE-94

TI-2023-18109 CVE-2023-36088 · GHSA-m28r-3xq9-r4pj

HIGH 72

Server Side Request Forgery (SSRF) vulnerability in NebulaGraph Studio version 3.7.0, allows remote attackers to gain sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00841 Published 2023-09-01 No fix listed CWE-918