NornicDB versions up to 1.4.1 allow authenticated users to perform searches on the /nornicdb/search and /nornicdb/similar endpoints without proper authorization checks. This flaw permits users with only viewer privileges to request node IDs and retrieve full property maps that should be restricted by per-database read permissions, effectively exposing confidential data. The vulnerability is a missing authorization condition, identified as CWE-862.

The vulnerability exists in orneryd:NornicDB. All installations of NornicDB 1.4.1 or earlier are susceptible; the lack of authorization controls in the vector search routes applies to these versions.

The flaw carries a CVSS score of 7.1, indicating a high severity. EPSS data is not available and the vulnerability is not listed in CISA's KEV catalog. An attacker can exploit the issue by issuing search queries or submitting node IDs over the network to the documented endpoints. The likely attack vector is remote network access to the exposed API, as the flaw exists in request handling code reachable from outside the database cluster.