CVE Tools
Track your stack

Network-ai

25 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Network-ai, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Network-ai CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Network-ai CVEs per month
MonthCVEs
2024-120
2025-010
2025-020
2025-030
2025-040
2025-050
2025-060
2025-070
2025-080
2025-090
2025-100
2025-110
2025-120
2026-010
2026-020
2026-030
2026-040
2026-051
2026-066
2026-079
2026-082
2026-090
2026-103
2026-114

Severity

How the 25 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical211%
  • High1158%
  • Medium526%
  • Low15%

Latest CVEs

The 15 most recently published vulnerabilities affecting Network-ai.

  1. CVE-2026-120313Network-AI before 5.15.5 Path Traversal via InputSanitizer.sanitizePath7.5
  2. CVE-2026-120314Network-AI 5.14.0 before 5.15.5 Missing Authentication in A2AServer Task Operations7.3
  3. CVE-2026-120312Network-AI 5.13.4 before 5.15.5 Path Traversal via AgentVCR Cassette Name8.8
  4. CVE-2026-120311Network-AI 5.13.4 before 5.15.5 Path Traversal via FileJobStore Job ID8.8
  5. CVE-2026-109332Network-AI before 5.15.2 CORS Origin Validation Error in MCP SSE Transport3.1
  6. CVE-2026-109331Network-AI 5.14.0 before 5.15.2 Deny Pattern Bypass via ClaudeHookBridge extractFullTarget7.4
  7. CVE-2026-109330Network-AI 5.0.0 before 5.15.2 Cross-Site WebSocket Hijacking via DashboardServer4.3
  8. CVE-2026-73614Network-AI ClaudeHookBridge Deny Pattern Bypass via Truncation8.8
  9. CVE-2026-73615Network-AI SandboxPolicy before 5.15.1 Blocklist Bypass via Quote Mismatch8.8
  10. CVE-2026-58484Network-AI: Poisoned environment backup manifest allows arbitrary recursive deletion during backup pruning7.1
  11. CVE-2026-58482Network-AI: ApprovalInbox HTTP server has no authentication — anyone can approve pending agent actions5.9
  12. CVE-2026-46701Network-AI: Unauthenticated Cross-Origin MCP Tool Invocation via Empty Default Secret7.6
  13. CVE-2026-58481Network-AI: AgentRuntime sandbox path-prefix checks allow file access outside the configured base directory6.5
  14. CVE-2026-58414Network-AI: EnvironmentManager.backup() follows symlinked directories and copies files outside the environment root into backups5.5
  15. CVE-2026-58413EnvironmentManager.restore() backup ID path traversal copies arbitrary directories into environment data6.1

Product grouping is registry-driven, with AI assist and human review. How it works