Investigate in your agent.

Turn this advisory into a focused investigation. Ask your agent to check your project’s versions, explain the evidence, and suggest a compatible fix.

Your agent needs remote MCP support and access to https://cve.new/mcp.

Read the setup guide

Skip to content
cve.new Create a CVE report
Check your stack
CVE-2026-115752medium4.2

Signal K Server 2.28.0-beta.2 before 2.34.0 SSRF via App Store appIcon

Impact

The app store icon code (dist/appstore/icon-probe.js around line 200 and icon-bytes.js around line 138) resolves a plugin's declared signalk.appIcon. Relative paths are pinned to the CDN, but an absolute http(s) URL is used as-is: the server fetches it, follows redirects, and stores any image/ response as the plugin's icon, which is then served to the admin UI. Unrelated to GHSA-q59x-jc9f-gfqf.

Source excerpt · OSV

Affected packages

Start with the recorded fix for your release branch. Check your installed version and test compatibility before upgrading. Fixing this advisory does not rule out other vulnerabilities in the release.

signalk-server npm
Affected range Recorded fix
From 2.28.0-beta.2 before 2.34.0Semantic versions2.34.0

Version evidence: OSV · GHSA-7wpf-ch8f-5f4x

View original version evidence (0 explicit versions)

Affected products

Vendor version evidence. Product records are separate from automatic dependency matching.

SignalK · VulnCheck

signalk-server

1 range
VulnCheck version evidence

Package identity

pkg:npm/signalk-serverExplore signalk-server →

Identity supplied by VulnCheck. Version matching requires compatible range evidence.

Compare with this publisher’s ranges. This does not inspect your installation.

affected

2.28.0-beta.2 → before 2.34.0

semver versions

unaffected

unknown

Other versions: unaffected

Original source description

Summary

The app store icon code (dist/appstore/icon-probe.js around line 200 and icon-bytes.js around line 138) resolves a plugin's declared signalk.appIcon. Relative paths are pinned to the CDN, but an absolute http(s) URL is used as-is: the server fetches it, follows redirects, and stores any image/* response as the plugin's icon, which is then served to the admin UI. Unrelated to GHSA-q59x-jc9f-gfqf.

Affected

signalk-server 2.33.0 (latest).

Reproduction

The real dist modules driven directly, Docker with --network none; a local "internal" service on 127.0.0.1 logs requests:

[CONTROL relative] declared=../../icon.png
  resolved=null
  internal-service hits: []  stored: null
[ATTACK absolute] declared=http://127.0.0.1:35013/latest/meta-data/iam
  resolved=http://127.0.0.1:35013/latest/meta-data/iam
  internal-service hits: ["GET /latest/meta-data/iam"]  stored: .../icon-bytes/evil-plugin@1.0.0.png (70 bytes)
[ATTACK redirect] declared=http://127.0.0.1:35013/redir
  internal-service hits: ["GET /redir","GET /internal-secret-via-redirect.png"]  stored: .../icon-bytes/evil-plugin@1.0.0.png (70 bytes)

The modules were tested directly rather than through a full running server.

Impact

Anyone who can get a plugin listed in the app store (publishing an npm package with the signalk keywords) can make every signalk-server that browses the app store send requests to internal addresses on the vessel network and to cloud metadata endpoints. Responses with an image content type are stored and served back to the user.

Suggested fix

Only accept relative icon paths resolved against the CDN (or an https allowlist of known hosts), do not follow redirects to other hosts, and reject private, loopback and link-local addresses after resolution.

Inside the record

Evidence available

Package identity
Version evidence
Remediation guidance · not supplied
Weakness classification
Additional publishers

Describes the evidence in this view, not whether the product is safe.

Original records

CVE-2026-115752

View the latest unmodified CVE JSON from the official source. It may be newer than this imported page.

cve.new JSON →

Underlying weaknesses

The source’s classification of what caused the vulnerability.

CWE-918 ↗

Server-Side Request Forgery (SSRF)

VulnCheck

Related →

Environment requirements

These conditions apply together as specified by the publisher. A matching product name alone does not establish exposure.

VulnCheck · platform conditions

Any condition may hold

Vulnerable product

cpe:2.3:a:signalk:signal_k_server:*:*:*:*:*:*:*:*

From (inclusive): 2.28.0-beta.2

Before: 2.34.0

Original applicability statements
[
  {
    "nodes": [
      {
        "operator": "OR",
        "negate": false,
        "cpeMatch": [
          {
            "vulnerable": true,
            "criteria": "cpe:2.3:a:signalk:signal_k_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding": "2.28.0-beta.2",
            "versionEndExcluding": "2.34.0"
          }
        ]
      }
    ]
  }
]
Contributing organizations · 2
VulnCheck

Assigning organization

2026-10-23
CISA-ADP

Additional data publisher

2026-10-29

What changed

Follow changes
No substantive changes have been recorded here yet. History starts when cve.new observes a change after tracking is enabled; earlier edits are not reconstructed.

Large field values are marked as truncated previews. Original source snapshots remain retained.

References

6 sources
github.com/SignalK/signalk-server/security/advisories/GHSA-7wpf-ch8f-5f4x
vendor-advisoryVulnCheck
github.com/SignalK/signalk-server/commit/535104f655304c697d535252da397948e5101dc6
patchVulnCheck
github.com/SignalK/signalk-server/releases/tag/v2.34.0
release-notesVulnCheck
www.vulncheck.com/advisories/signal-k-server-2.28.0-beta.2-before-2.34.0-ssrf-via-app-store-appicon
third-party-advisoryVulnCheck
github.com/SignalK/signalk-server/commit/7eeae00ac4aee5f04e21e3ff9527f57823e65a4d
Patch
github.com/SignalK/signalk-server
Source reference