Description
Network-AI ClaudeHookBridge before 5.15.1 truncates the target string to 500 characters before evaluating denyPatterns, while Claude Code executes the full untruncated command. Attackers can position dangerous content past byte 500 in a Bash command field to bypass the operator's hard-deny list and execute arbitrary commands.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Jovancoding | Network-AI | < 5.15.1 | 5.15.1 |
References
- GitHub Security Advisory (GHSA-743h-jr5x-mpcr) vendor-advisory
- VulnCheck Advisory: Network-AI ClaudeHookBridge Deny Pattern Bypass via Truncation third-party-advisory