CVE-2025-11864

Name of the Vulnerable Software and Affected Versions NucleoidAI Nucleoid versions up to 0.7.10

Description A flaw exists in NucleoidAI Nucleoid that allows for server-side request forgery. This issue is related to the extension.apply function within the /src/cluster.ts file of the Outbound Request Handler component. Manipulation of the https/ip/port/path/headers argument can trigger the flaw. The attack can be performed remotely.

Recommendations Update NucleoidAI Nucleoid to a version newer than 0.7.10.