CVE-2026-85692: Server-Side Request Forgery (SSRF) in ccfos nightingale
Description
Nightingale (n9e), as of commit 8362cbe (main branch, confirmed 2026-08-27), contains a server-side request forgery vulnerability in the isPublicIP function in aiagent/tools/http.go, the SSRF guard for the http_fetch AI-agent tool. The function only unwraps standard IPv4-mapped (::ffff:a.b.c.d) IPv6 addresses before checking them against the forbidden-range list, and does not classify 6to4 (2002::/16), NAT64 (64:ff9b::/96, 64:ff9b:1::/48), or deprecated site-local (fec0::/10) addresses. On a dual-stack or NAT64-enabled host, an attacker able to supply a URL to the http_fetch tool can bypass the guard by encoding a forbidden IPv4 address (such as the cloud instance-metadata endpoint 169.254.169.254) in one of these IPv6 forms to reach internal or metadata services.
CVSS v4.0
Score 7.1high
Affected software
ccfos
nightingale
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-85692 is an SSRF vulnerability in the isPublicIP function of Nightingale (n9e), specifically in the AI-agent tool http_fetch. The function attempts to prevent SSRF by checking IP addresses against forbidden ranges but only unwraps standard IPv4-mapped (::ffff:a.b.c.d) IPv6 addresses. It fails to recognize other IPv6 address types like 6to4 (2002::/16), NAT64 (64:ff9b::/96, 64:ff9b:1::/48), and deprecated site-local (fec0::/10) addresses. On dual-stack or NAT64-enabled hosts, this allows attackers supplying URLs to the http_fetch tool to bypass SSRF protections by encoding forbidden IPv4 addresses (e.g., 169.254.169.254) in these IPv6 forms, potentially reaching internal or cloud instance metadata services.
Potential Impact
An attacker with the ability to supply URLs to the http_fetch AI-agent tool can bypass SSRF protections and access internal network resources or cloud instance metadata endpoints by encoding forbidden IPv4 addresses in certain IPv6 address formats. This can lead to unauthorized information disclosure or further internal network attacks. The vulnerability has a CVSS 4.0 score of 7.1 (high severity), indicating a significant risk if exploited.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is currently available. Until a patch is released, users should consider restricting or validating inputs to the http_fetch tool to prevent attacker-controlled URLs or disable the tool if possible.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-09-04T13:51:44.996Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6a9adb49acd9273b49bef5f8
Added to database: 09/04/2026, 14:52:57 UTC
Last enriched: 09/07/2026, 12:04:00 UTC
Last updated: 10/19/2026, 18:48:24 UTC
Views: 106
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.