CVE-2026-81032Disclosure

LOWCVSS 9.3 · CRITICAL

Signal is active with 3 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

NebulaGraph exposes its runtime configuration over an unauthenticated HTTP service. Each daemon starts the web service defined in src/webservice/WebService.cpp, whose bind address defaults to all interfaces, and registers routes for reading and writing gflags alongside status and statistics. Neither the service nor its router carries any authentication, token check or address restriction. The read route returns the daemon's full set of runtime flag values, which includes the configured certificate, key and certificate-authority paths, the password file path, data directories and the transport-security enable flags. The write route parses a supplied map and applies each entry through the gflags runtime setter, so a caller able to reach the port can change the daemon's behaviour without restarting it, including disabling the transport-security flags, redirecting log files and altering flags such as failed_login_attempts and password_lock_time_in_secs. Public reports of this endpoint describe a single name, enable_authorize, being refused by the handler; at release 3.8.0 that refusal is not present and the handler applies every name it is given.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-306

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

3 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
General: 1 classified signal
3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d

Signal classification2 categories

Disclosure

266.7%

General

133.3%

Referenced assets3 URLs

By indicator

Full discourse3 posts

Upwind Security MDR@UpwindMDR46d
Disclosure
🚨Critical - NebulaGraph unauthenticated runtime configuration exposure and modification (CVE-2026-81032) graphd, metad, and storaged each start the HTTP service in src/webservice/WebService.cpp bound to all interfaces by default (ws_ip=0.0.0.0), with /flags routes to read and write runtime gflags and no auth, token, or source restriction. Any reachable attacker dumps cert/key/CA and password-file paths, data dirs, and TLS flags, then live-modifies daemon behavior — disabling transport security, redirecting logs, and altering enable_authorize, failed_login_attempts, and password_lock_time_in_secs without a restart. 👉Affected: NebulaGraph community through 3.8.0 | No fix yet
Post summary
The post discloses an unauthenticated runtime configuration exposure in NebulaGraph 3.8.0 that lets attackers dump sensitive data and modify daemon flags, with no patch yet released or exploit code provided.
0001075
297 followersView on X
CVE@CVEnew45d
Disclosure
CVE-2026-81032 NebulaGraph exposes its runtime configuration over an unauthenticated HTTP service. Each daemon starts the web service defined in src/webservice/WebService.cpp, whose… https://www.cve.org/CVERecord?id=CVE-2026-81032
Post summary
The passage announces CVE-2026-81032, detailing that NebulaGraph leaks its runtime configuration via an unauthenticated HTTP endpoint, but provides no information about PoC, exploit tools, or patches.
000001.2K
58.0K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds46d
General
CVE-2026-81032 NebulaGraph Unauthenticated HTTP Service Allows Runtime Configura... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-81032 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4
Post summary
NebulaGraph vulnerability CVE-2026-81032 is mentioned with a brief title, but the post lacks detailed technical information, exploit code, patch guidance, or evidence of active exploitation.
00000114
4.1K followersView on X

Explore more

Back to dashboard