Critical severity · published Feb 16, 2026
CVE-2026-2532
lintsinghua DeepAudit IP Address embedding_config.py server-side request forgery
9.8
CVSS
0.3%
EPSS
No
On KEV
Description
A vulnerability was detected in lintsinghua DeepAudit up to 3.0.3. This issue affects some unknown processing of the file backend/app/api/v1/endpoints/embedding_config.py of the component IP Address Handler. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. Upgrading to version 3.0.4 and 3.1.0 is capable of addressing this issue. The patch is named da853fdd8cbe9d42053b45d83f25708ba29b8b27. It is suggested to upgrade the affected component.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 21% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DE
DeepAudit · lintsinghua
3.0.0; 3.0.1; 3.0.2; 3.0.3 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-2532
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-2532
Product
https://github.com/lintsinghua/DeepAudit/
Patch
https://github.com/lintsinghua/DeepAudit/commit/da853fdd8cbe9d42053b45d83f25708ba29b8b27
Issue Tracking
https://github.com/lintsinghua/DeepAudit/issues/144
Issue Tracking
https://github.com/lintsinghua/DeepAudit/pull/145
Release Notes
https://github.com/lintsinghua/DeepAudit/releases/tag/v3.0.4
Permissions Required
https://vuldb.com/?ctiid.346120
More from DeepAudit
6.5
CVE-2026-25729
DeepAudit Affected by User Enumeration via Broken Access Control