CVE-2026-2532 | lintsinghua DeepAudit up to 3.0.3 IP Address embedding_config.py server-side request forgery

February 15, 2026 Yanac

A vulnerability marked as critical has been reported in lintsinghua DeepAudit up to 3.0.3. This issue affects some unknown processing of the file backend/app/api/v1/endpoints/embedding_config.py of the component IP Address Handler. Performing a manipulation results in server-side request forgery.

This vulnerability is cataloged as CVE-2026-2532. It is possible to initiate the attack remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More