CVE-2024-47219 in github.com/vesoft-inc/nebula

CRITICAL 9.8CVE-2024-47219 · GO-2024-3156 · Published 22/09/2024 · updated 17/06/2026

In short

CVE-2024-47219 is a CRITICAL (CVSS 9.8) vulnerability affecting github.com/vesoft-inc/nebula, nebulagraph database (vesoft).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 68.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
github.com/vesoft-inc/nebula Go	`all versions`	No fix yet
nebulagraph database vesoft	`≤ 3.8.0`	No fix yet

NVD description

An issue was discovered in vesoft NebulaGraph through 3.8.0. It allows shell command injection.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.