---
id: CVE-2026-116069
title: NiubiGEO before 0.3.2 Unauthenticated SSRF via /audit-plan domain Field
summary: >-
  NiubiGEO before 0.3.2 contains an unauthenticated server-side request forgery
  vulnerability that allows remote attackers to make the server fetch internal
  addresses by supplying a crafted domain value to POST /audit-plan. Attackers
  can s…
severity: medium
cvss: 6.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N'
cvssSource: cna
cwe:
  - CWE-918
vendor: Albert-Weasker
product: niubigeo
affected:
  - niubigeo < 0.3.2
published: '2026-10-25'
updated: '2026-10-25'
sourceUpdated: '2026-10-25T11:50:57.876Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-116069'
references:
  - url: 'https://github.com/Albert-Weasker/niubigeo/issues/242'
    label: 'GitHub Issue #242'
  - url: 'https://github.com/Albert-Weasker/niubigeo'
  - url: >-
      https://github.com/Albert-Weasker/niubigeo/blob/25d1f06e87c73d1df98bb82a2cfebacc0c215111/src/server.ts#L875-L894
  - url: >-
      https://github.com/Albert-Weasker/niubigeo/blob/25d1f06e87c73d1df98bb82a2cfebacc0c215111/src/keywords/site-evidence.ts#L127-L149
  - url: >-
      https://github.com/Albert-Weasker/niubigeo/commit/299b9e71881d445e976012ad75ecdd05ce802715
  - url: 'https://github.com/Albert-Weasker/niubigeo/releases/tag/v0.3.2'
    label: v0.3.2 Release Notes
  - url: >-
      https://www.vulncheck.com/advisories/niubigeo-before-0.3.2-unauthenticated-ssrf-via-audit-plan-domain-field
    label: >-
      VulnCheck Advisory: NiubiGEO before 0.3.2 Unauthenticated SSRF via
      /audit-plan domain Field
tags:
  - cve.org
ingestedAt: '2026-10-25T22:08:29.959Z'
---

## Overview

NiubiGEO before 0.3.2 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch internal addresses by supplying a crafted domain value to POST /audit-plan. Attackers can submit IP literals, localhost, or private and link-local hosts to read loopback, internal-network, or cloud metadata responses returned in the plan's siteEvidence JSON.

## Affected

- `niubigeo < 0.3.2`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.