PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-108710 orneryd CVE debrief

CVE-2026-108710: NornicDB through 1.4.1 contains a missing authorization vulnerability that allows authenticated users to bypass per-database read restrictions on the /nornicdb/search and /nornicdb/similar endpoints. This vulnerability allows users with limited privileges to retrieve sensitive information, potentially leading to unauthorized data access. Defenders should assess exposure and prioritize remediation, especially in systems using NornicDB version 1.4.1 or earlier. The vulnerability highlights the importance of proper authorization checks and monitoring for suspicious activity.

Vendor
orneryd
Product
NornicDB
CVSS
HIGH 7.1
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-11
Original CVE updated
2026-10-11
Advisory published
2026-10-11
Advisory updated
2026-10-11

Who should care

Defenders responsible for NornicDB instances, especially those using version 1.4.1 or earlier, should assess exposure and prioritize remediation. This includes operators, platform administrators, vulnerability management teams, and security teams who need to verify and remediate this vulnerability to prevent potential unauthorized data access and other operational impacts.

Why it matters

CVE-2026-108710 is a missing authorization vulnerability in NornicDB that allows authenticated users to bypass read restrictions. Defenders should verify and remediate this vulnerability, especially in systems using NornicDB version 1.4.1 or earlier.

  • Potential unauthorized data access through vector search endpoints
  • Bypassing of per-database read restrictions
  • Increased risk for authenticated users with limited privileges

Technical summary

The vulnerability allows authenticated users to bypass per-database read restrictions on the /nornicdb/search and /nornicdb/similar endpoints in NornicDB through 1.4.1. This missing authorization vulnerability can lead to unauthorized data access and increased risk for authenticated users with limited privileges. Defenders should prioritize verifying and remediating this vulnerability in their systems, especially those using NornicDB version 1.4.1 or earlier. Proper authorization checks and monitoring for suspicious activity are crucial to mitigate this vulnerability.

Defensive priority

Defenders should prioritize verifying and remediating this vulnerability in their systems, especially those using NornicDB version 1.4.1 or earlier.

Recommended defensive actions

  • Verify NornicDB version and restrict access to /nornicdb/search and /nornicdb/similar endpoints
  • Implement proper authorization checks for vector search endpoints
  • Monitor for suspicious activity on NornicDB instances
  • Update NornicDB to a version that fixes the vulnerability, if available
  • Review compensating controls for exposed systems while remediation is scheduled and verified
  • Check relevant monitoring, detection, and logs for exposed assets that need extra review
  • Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The CVE record and source item provide details on the missing authorization vulnerability in NornicDB through 1.4.1. The vulnerability allows authenticated users to bypass per-database read restrictions on the /nornicdb/search and /nornicdb/similar endpoints. Evidence is limited to the CVE record and source item, and defenders should verify and remediate this vulnerability, especially in systems using NornicDB version 1.4.1 or earlier. Additional verification and monitoring are necessary to detect potential exploitation attempts.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-108710 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-108710

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-108710 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-108710

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • NornicDB through 1.4.1 Missing Authorization via Vector Search Endpoints

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108710.json

    cve_program_cvelist_v5

  • Source reference

    Unverified legacy reference

    URL: https://hackmd.io/@haind/orneryd-nornicdb-vector-endpoints-per-db-read-bypass

    Supplemental source - third-party-advisory

  • Source reference

    Unverified legacy reference

    URL: https://github.com/orneryd/NornicDB/blob/67105489e6da00714b998faf9012ffa44f526245/pkg/server/server_nornicdb.go

    Supplemental source - technical-description

  • Source reference

    Unverified legacy reference

    URL: https://github.com/orneryd/NornicDB/blob/67105489e6da00714b998faf9012ffa44f526245/pkg/server/server_graph.go

    Supplemental source - technical-description

  • Source reference

    Unverified legacy reference

    URL: https://github.com/orneryd/NornicDB

    Supplemental source - product

  • Source reference

    Unverified legacy reference

    URL: https://www.vulncheck.com/advisories/nornicdb-through-1.4.1-missing-authorization-via-vector-search-endpoints

    Supplemental source - third-party-advisory

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.