Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2025-11864

NucleoidAI Nucleoid Outbound Request cluster.ts extension.apply server-side request forgery

Description

A vulnerability was identified in NucleoidAI Nucleoid up to 0.7.10. The impacted element is the function extension.apply of the file /src/cluster.ts of the component Outbound Request Handler. Such manipulation of the argument https/ip/port/path/headers leads to server-side request forgery. The attack may be performed from remote.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NucleoidAI Nucleoid

  • 0.7.0affected
  • 0.7.1affected
  • 0.7.2affected
  • 0.7.3affected
  • 0.7.4affected
  • 0.7.5affected
  • 0.7.6affected
  • 0.7.7affected
  • 0.7.8affected
  • 0.7.9affected
  • 0.7.10affected

References