CVE-2026-85692 Details
Description
Nightingale (n9e), as of commit 8362cbe (main branch, confirmed 2026-08-27), contains a server-side request forgery vulnerability in the isPublicIP function in aiagent/tools/http.go, the SSRF guard for the http_fetch AI-agent tool. The function only unwraps standard IPv4-mapped (::ffff:a.b.c.d) IPv6 addresses before checking them against the forbidden-range list, and does not classify 6to4 (2002::/16), NAT64 (64:ff9b::/96, 64:ff9b:1::/48), or deprecated site-local (fec0::/10) addresses. On a dual-stack or NAT64-enabled host, an attacker able to supply a URL to the http_fetch tool can bypass the guard by encoding a forbidden IPv4 address (such as the cloud instance-metadata endpoint 169.254.169.254) in one of these IPv6 forms to reach internal or metadata services.
A server-side request forgery (SSRF) vulnerability has been identified in Nightingale (n9e) version 9.1.1. The issue resides in the 'isPublicIP' function within 'aiagent/tools/http.go', which serves as the SSRF guard for the 'http_fetch' AI-agent tool. This function only processes standard IPv4-mapped IPv6 addresses before verifying them against a list of forbidden ranges. It fails to recognize 6to4, NAT64, or deprecated site-local IPv6 addresses. As a result, on a dual-stack or NAT64-enabled host, an attacker can exploit this vulnerability by encoding a forbidden IPv4 address, such as the cloud instance-metadata endpoint, into one of these unsupported IPv6 formats to access internal or metadata services.
Users can update to Nightingale version 9.1.1 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Sep 4, 2026CISA-ADP
Assessed Sep 4, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/ccfos/nightingale/issues/3363 | CISA-ADP | ExploitIssue TrackingTechnical DescriptionVendor |
| https://github.com/ccfos/nightingale | [email protected] | ProductSource CodeVendor |
| https://github.com/ccfos/nightingale/blob/v9.1.1/aiagent/tools/http.go | [email protected] | Source CodeVendor |
| https://github.com/ccfos/nightingale/issues/3363 | [email protected] | ExploitIssue TrackingTechnical DescriptionVendor |
| https://www.vulncheck.com/advisories/nightingale-9.1.1-ssrf-guard-bypass-via-ipv6-encoding | [email protected] | AdvisoryVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-918 | Server-Side Request Forgery (SSRF) | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| ccfos Nightingale | <= 9.1.1 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 4, 2026 | CVE Modified | CISA-ADP |
| Sep 4, 2026 | New CVE Received | [email protected] |