Skip to content
OpenAdvisories

Vendor

Jovancoding

20 known vulnerabilities.

Products

Network-AI 20
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.9
    CVE-2026-54051

    Network-AI has an an OS Command Injection issue

    Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.9.1, the agent sandbox gates shell commands behind an allowlist (`SandboxPolicy.isCommandAllowed`), which THREAT_MODEL.md calls the main control against a compromised agent (Adver…

    Jovancoding Network-AI network-ai npm
  • Critical 9.1
    CVE-2026-48814

    Network-AI: Empty default secret still authorizes all requests (Incomplete fix for CVE-2026-46701)

    Network-AI is a TypeScript/Node.js multi-agent orchestrator. In versions 5.7.1 and earlier, the MCP SSE server allows unauthenticated cross-origin MCP tool invocation due to an empty default secret. This issue was partially addressed by CVE-2026-46701 in vers…

    Jovancoding Network-AI network-ai npm