Threat database

NebulaGraph versions up to 3.8.0 expose a runtime configuration HTTP service without any authentication, allowing unauthenticated access to read and modify critical runtime flags. This includes sensitive information such as certificate paths and password files, and enables changing daemon behavior like disabling transport security or altering login attempt limits. The vulnerability has a critical severity with a CVSS score of 9.3. No official patch or remediation guidance is currently available.

TIER IV Nebula versions up to 1.2.0 contain an out-of-bounds read vulnerability in the Vlp32Decoder::unpack() function. This flaw allows unauthenticated remote attackers to send short UDP datagrams to the Velodyne UDP sensor port, causing the decoder to read beyond the buffer into adjacent heap memory. As a result, fabricated point data derived from heap memory may be published into PointCloud2 messages consumed by Autoware nodes.

Nebula is a scalable overlay networking tool. In versions from 1.7.0 to 1.10.2, when using P256 certificates (which is not the default configuration), it is possible to evade a blocklist entry created against the fingerprint of a certificate by using ECDSA Signature Malleability to use a copy of the certificate with a different fingerprint. This issue has been patched in version 1.10.3.

Slack Nebula before 1.9.7 mishandles CIDR in some configurations and thus accepts arbitrary source IP addresses within the Nebula network.

An issue was discovered in vesoft NebulaGraph through 3.8.0. It allows bypassing authentication.