Skip to content
OpenAdvisories

Vendor

ccfos

2 known vulnerabilities.

Products

nightingale 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-85692

    Nightingale 9.1.1 SSRF Guard Bypass via IPv6 Encoding

    Nightingale (n9e), as of commit 8362cbe (main branch, confirmed 2026-08-27), contains a server-side request forgery vulnerability in the isPublicIP function in aiagent/tools/http.go, the SSRF guard for the http_fetch AI-agent tool. The function only unwraps s…

    ccfos nightingale
  • Medium 6.5
    CVE-2026-58167

    Nightingale < 9.0.0-beta.2 - Datasource Credential Disclosure to Low-Privilege Users

    Nightingale (n9e) before 9.0.0-beta.2 exposes full datasource configurations, including plaintext database passwords, HTTP bearer tokens, HTTP basic-auth passwords, and mTLS client keys, to any authenticated low-privilege (Standard role) user through POST /ap…

    ccfos nightingale github.com/ccfos/nightingale github.com/ccfos/nightingale/v5 Go