Read the docs
TI-2026-51699 Aliases CVE-2026-73615GHSA-x5mx-wq8q-46ph

Network-AI SandboxPolicy before 5.15.1 Blocklist Bypass via Quote Mismatch

Priority HIGH 73CWE-436Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

Network-AI versions before 5.15.1 contain a security matcher bypass vulnerability where SandboxPolicy evaluates raw command strings with quotes preserved while the executor tokenizes commands by stripping quotes before execution. Attackers can craft quoted commands that evade blocklist checks and approval gates while the executor runs the identical unquoted dangerous argv.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00654 51st percentileScored 2026-11-07
Fix Fixed Network-AI (Jovancoding): 5.15.1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
JovancodingNetwork-AIbefore 5.15.15.15.1Patch availableCNA
  • Network-AI VendorJovancoding Affected before 5.15.1 Fixed in 5.15.1 Patch available CNA

CPE names Threatist (inferred) · 1

Inferred from how NVD named this product before; not given by a source.

CPEVersionsRoleVendor
cpe:2.3:a:network-ai:network-ai:*:*:*:*:*:*:*:*——Jovancoding
  • cpe:2.3:a:network-ai:network-ai:*:*:*:*:*:*:*:* Versions — — ·Jovancoding

Remediation

  • Fix · CNA Network-AI (Jovancoding) Fixed in 5.15.1

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Jovancoding Network-AI 5.15.1

    2 records Highest priority Priority HIGH 2 HIGH

    Other records, highest priority first

    • TI-2026-51698 Network-AI ClaudeHookBridge Deny Pattern Bypass via TruncationPriority HIGH 73
    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-73615
  2. 2026-10-03 Alias added: GHSA-x5mx-wq8q-46ph
  3. 2026-10-14 EPSS moved to the 50th–90th percentile

References

Advisory 1

  • TI-2026-46183 Network-AI 5.12.2 through 5.13.3 Missing Authorization via ApprovalInbox CVSS 4.0CRITICAL 9.3
  • TI-2026-36083 Network-AI: Empty default secret still authorizes all requests (Incomplete fix for CVE-2026-46701) CVSS 3.1CRITICAL 9.1
  • TI-2026-83679 Path traversal in Network-AI sanitizer exposes files outside sandbox CVSS 4.0HIGH 8.7
  • TI-2026-46184 Network-AI before 5.13.4 Cryptographic Signature Verification Bypass CVSS 4.0HIGH 8.8
  • TI-2026-38985 Network-AI has an an OS Command Injection issue CVSS 3.1CRITICAL 9.9
  • TI-2026-83677 Path traversal in Network-AI FileJobStore lets attackers read or delete files CVSS 4.0HIGH 8.7
See all 19 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences