NucleoidAI Nucleoid Outbound Request cluster.ts extension.apply server-side request forgery
Vulnerability Description
A vulnerability was identified in NucleoidAI Nucleoid up to 0.7.10. The impacted element is the function extension.apply of the file /src/cluster.ts of the component Outbound Request Handler. Such manipulation of the argument https/ip/port/path/headers leads to server-side request forgery. The attack may be performed from remote.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-11864
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- lakshay12311 (VulDB User)
Affected Vendor
NucleoidAI
View all reports →