Nightingale
Monthly
Server-side request forgery in Nightingale (n9e), the open-source observability platform by ccfos, allows authenticated users of the http_fetch AI-agent tool to bypass the platform's SSRF guard by encoding forbidden IPv4 addresses using 6to4, NAT64, or deprecated site-local IPv6 representations. The isPublicIP function in aiagent/tools/http.go only unwraps standard ::ffff:a.b.c.d IPv4-mapped IPv6 addresses before applying the forbidden-range check, leaving 2002::/16 (6to4), 64:ff9b::/96 and 64:ff9b:1::/48 (NAT64), and fec0::/10 (site-local) unrecognized and passable as 'public'. On dual-stack or NAT64-enabled cloud hosts, this allows an attacker to reach the cloud instance-metadata endpoint (169.254.169.254) or internal services and exfiltrate IAM credentials or sensitive configuration. No public exploit code has been identified at time of analysis.
Credential disclosure in Nightingale (n9e) before 9.0.0-beta.2 lets any authenticated Standard-role (low-privilege) user retrieve full datasource configurations via POST /api/n9e/datasource/list, exposing plaintext database passwords, HTTP bearer tokens, basic-auth passwords, and mTLS client keys. Reported by VulnCheck and fixed in v9.0.0-beta.2, this missing-authorization flaw effectively turns a read-only monitoring account into a pivot point against every connected downstream system. No public exploit has been identified at time of analysis, and it is not listed in CISA KEV.
Server-side request forgery in Nightingale (n9e), the open-source observability platform by ccfos, allows authenticated users of the http_fetch AI-agent tool to bypass the platform's SSRF guard by encoding forbidden IPv4 addresses using 6to4, NAT64, or deprecated site-local IPv6 representations. The isPublicIP function in aiagent/tools/http.go only unwraps standard ::ffff:a.b.c.d IPv4-mapped IPv6 addresses before applying the forbidden-range check, leaving 2002::/16 (6to4), 64:ff9b::/96 and 64:ff9b:1::/48 (NAT64), and fec0::/10 (site-local) unrecognized and passable as 'public'. On dual-stack or NAT64-enabled cloud hosts, this allows an attacker to reach the cloud instance-metadata endpoint (169.254.169.254) or internal services and exfiltrate IAM credentials or sensitive configuration. No public exploit code has been identified at time of analysis.
Credential disclosure in Nightingale (n9e) before 9.0.0-beta.2 lets any authenticated Standard-role (low-privilege) user retrieve full datasource configurations via POST /api/n9e/datasource/list, exposing plaintext database passwords, HTTP bearer tokens, basic-auth passwords, and mTLS client keys. Reported by VulnCheck and fixed in v9.0.0-beta.2, this missing-authorization flaw effectively turns a read-only monitoring account into a pivot point against every connected downstream system. No public exploit has been identified at time of analysis, and it is not listed in CISA KEV.