CVE-2026-85692
Received Received - Intake

SSRF Bypass in Nightingale via IPv6 Address Encoding

Publication date: 2026-09-04

Last updated on: 2026-09-04

Assigner: VulnCheck

Description
Nightingale (n9e), as of commit 8362cbe (main branch, confirmed 2026-08-27), contains a server-side request forgery vulnerability in the isPublicIP function in aiagent/tools/http.go, the SSRF guard for the http_fetch AI-agent tool. The function only unwraps standard IPv4-mapped (::ffff:a.b.c.d) IPv6 addresses before checking them against the forbidden-range list, and does not classify 6to4 (2002::/16), NAT64 (64:ff9b::/96, 64:ff9b:1::/48), or deprecated site-local (fec0::/10) addresses. On a dual-stack or NAT64-enabled host, an attacker able to supply a URL to the http_fetch tool can bypass the guard by encoding a forbidden IPv4 address (such as the cloud instance-metadata endpoint 169.254.169.254) in one of these IPv6 forms to reach internal or metadata services.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-04
Last Modified
2026-09-04
Generated
2026-09-04
AI Q&A
2026-09-04
EPSS Evaluated
N/A
NVD
CVE-2026-85692
EUVD
EUVD-2026-71141

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
ccfos nightingale 9.1.1
ccfos nightingale to 9.1.1 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-918 The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a server-side request forgery (SSRF) in the Nightingale (n9e) software. It exists in the isPublicIP function which checks if an IP address is public before allowing HTTP requests. The function fails to properly handle certain IPv6 address formats like 6to4, NAT64, or deprecated site-local addresses, allowing attackers to bypass restrictions and access internal services by encoding forbidden IPv4 addresses in these IPv6 forms.

Detection Guidance

To detect this vulnerability, inspect the isPublicIP function in aiagent/tools/http.go for proper handling of IPv6 formats like 6to4, NAT64, and site-local addresses. Check if forbidden IPv4 addresses are encoded in these formats and bypass SSRF protections. Review network logs for unexpected outbound requests to internal or metadata endpoints from the http_fetch tool.

Impact Analysis

An attacker could exploit this to make unauthorized requests to internal or metadata services from a vulnerable server. This could lead to data breaches, unauthorized access to sensitive information, or further network compromise if the server has access to internal resources.

Compliance Impact

This vulnerability could lead to unauthorized access to personal or sensitive data, violating GDPR's data protection principles or HIPAA's security requirements for protected health information. Organizations using this software may fail compliance audits if exploited.

Mitigation Strategies

Update Nightingale (n9e) to a version that patches the SSRF vulnerability in the isPublicIP function. Review and restrict access to the http_fetch AI-agent tool to prevent unauthorized URL processing. Monitor network traffic for unusual IPv6-encoded requests targeting internal services.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-85692. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart