Read the docs
TI-2026-31063 Aliases CVE-2026-42856GHSA-fj4g-2p96-q6m3

Network-AI: Missing authentication on MCP HTTP endpoint allows unauthenticated privileged tool calls

Priority HIGH 71CWE-306Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Security bypass
Confidentiality · integrity · availability
None · High · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub. Impact type from CWE-306.

Summary

Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to 5.1.3, the MCP HTTP transport accepts JSON-RPC tools/call requests with no authentication, session, origin, or token check, and dispatches them directly to the orchestrator's tool registry. The default bind address is 0.0.0.0. As a result, any party with network reachability to the service can enumerate and invoke privileged management tools. This vulnerability is fixed in 5.1.3.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00549 46th percentileScored 2026-11-07
Fix Fixed Network-AI (Jovancoding): 5.1.3network-ai (npm): 5.1.3

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
JovancodingNetwork-AIbefore 5.1.35.1.3Patch availableCNA
—network-ai (npm)before 5.1.35.1.3Patch availableGHSA-fj4g-2p96-q6m3
  • Network-AI VendorJovancoding Affected before 5.1.3 Fixed in 5.1.3 Patch available CNA
  • network-ai (npm) Vendor— Affected before 5.1.3 Fixed in 5.1.3 Patch available GHSA-fj4g-2p96-q6m3

CPE names Threatist (inferred) · 1

Inferred from how NVD named this product before; not given by a source.

CPEVersionsRoleVendor
cpe:2.3:a:network-ai:network-ai:*:*:*:*:*:*:*:*——Jovancoding
  • cpe:2.3:a:network-ai:network-ai:*:*:*:*:*:*:*:* Versions — — ·Jovancoding

Remediation

  • Fix · CNA Network-AI (Jovancoding) Fixed in 5.1.3
  • Fix · GHSA-fj4g-2p96-q6m3 network-ai (npm) Fixed in 5.1.3 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-42856
  2. 2026-10-03 Alias added: GHSA-fj4g-2p96-q6m3

References

Advisory 1

Other 2

  • TI-2026-46183 Network-AI 5.12.2 through 5.13.3 Missing Authorization via ApprovalInbox CVSS 4.0CRITICAL 9.3
  • TI-2026-36083 Network-AI: Empty default secret still authorizes all requests (Incomplete fix for CVE-2026-46701) CVSS 3.1CRITICAL 9.1
  • TI-2026-83679 Path traversal in Network-AI sanitizer exposes files outside sandbox CVSS 4.0HIGH 8.7
  • TI-2026-46184 Network-AI before 5.13.4 Cryptographic Signature Verification Bypass CVSS 4.0HIGH 8.8
  • TI-2026-38985 Network-AI has an an OS Command Injection issue CVSS 3.1CRITICAL 9.9
  • TI-2026-83677 Path traversal in Network-AI FileJobStore lets attackers read or delete files CVSS 4.0HIGH 8.7
See all 19 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences