CVE-2026-81032

Name of the Vulnerable Software and Affected Versions NebulaGraph (affected versions not specified)

Description NebulaGraph exposes its runtime configuration through an unauthenticated HTTP service implemented in src/webservice/WebService.cpp. By default, this service binds to all interfaces and lacks authentication, token verification, or address restrictions. The read route allows unauthorized access to the daemon's full set of runtime flag values, including paths for certificates, keys, certificate authorities, password files, and data directories, as well as transport-security enable flags. The write route allows a remote caller to modify the daemon's behavior without a restart by applying entries through the gflags runtime setter. This enables the modification of flags such as failed login attempts and password lock time in secs, and the disabling of transport-security flags. In version 3.8.0, the restriction previously applied to the enable authorize flag was removed, allowing the handler to apply any provided name.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.