TI-2026-71146 Aliases CVE-2026-109330 GHSA-q84g-m42h-q9rc

Cross-site WebSocket hijacking in Network-AI DashboardServer

MEDIUM 57CWE-1385Published 2026-10-12 · Updated 2026-10-13

Key facts

Attack vector: Network
Privileges required: None
User interaction: Passive
Attack complexity: Low
Attack requirements: None
Impact type: —
Confidentiality · integrity · availability: Low · None · None
Fix status: Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

Network-AI 5.0.0 before 5.15.2 contains a cross-site WebSocket hijacking flaw in DashboardServer, where the upgrade handler performs no Origin or token validation (CWE-1385). A remote attacker can lure a user running the dashboard to a malicious page that opens a WebSocket to the loopback dashboard and reads live agent topology, including agent IDs, roles, task descriptions and token budgets.

Written with Claude Haiku 5.5 from the sources below · 2026-10-29

Description from the CNA

Network-AI 5.0.0 before 5.15.2 contains a cross-site WebSocket hijacking vulnerability in DashboardServer that allows remote attackers to read live agent topology because handleUpgrade performs no Origin or token validation. Attackers can lure a victim running the dashboard to a malicious page that opens a WebSocket to the loopback dashboard and exfiltrates agent IDs, roles, task descriptions, and token budgets.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.00182 7th percentileScored 2026-11-07

Fix Fixed Network-AI (Jovancoding): 5.15.2

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Jovancoding	Network-AI	5.0.0 to before 5.15.2	5.15.2	Patch available	CNA

Network-AI VendorJovancoding Affected 5.0.0 to before 5.15.2 Fixed in 5.15.2 Patch available CNA

CPE names Threatist (inferred) · 1

Inferred from how NVD named this product before; not given by a source.

CPE	Versions	Role	Vendor
cpe:2.3:a:network-ai:network-ai::::::::	—	—	Jovancoding

cpe:2.3:a:network-ai:network-ai:*:*:*:*:*:*:*:* Versions — — ·Jovancoding

Remediation

Upgrade Jovancoding Network-AI to version 5.15.2 or later, which fixes the issue.

Written with Claude Haiku 5.5 from the sources below · 2026-10-29

Fix · CNA Network-AI (Jovancoding) Fixed in 5.15.2

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

Release · 2026-10-12
Jovancoding Network-AI 5.15.2
3 records Highest priority Priority MEDIUM 2 MEDIUM, 1 LOW
Other records, highest priority first
- TI-2026-71148 CORS origin validation error in Network-AI MCP SSE transportPriority MEDIUM 45
- TI-2026-71147 Deny pattern bypass in Network-AI ClaudeHookBridge hookPriority LOW 34
Show all 3 records →

Timeline

2026-10-12 Threatist record created from CVE-2026-109330
2026-10-12 Alias added: GHSA-q84g-m42h-q9rc
2026-10-13 CISA SSVC decision points changed
2026-10-13 Priority changed: LOW → MEDIUM

References

Advisory 1

GitHub Security Advisory (GHSA-hr6v-mfxm-4438)

TI-2026-46183 Network-AI 5.12.2 through 5.13.3 Missing Authorization via ApprovalInbox CVSS 4.0CRITICAL 9.3
TI-2026-36083 Network-AI: Empty default secret still authorizes all requests (Incomplete fix for CVE-2026-46701) CVSS 3.1CRITICAL 9.1
TI-2026-83679 Path traversal in Network-AI sanitizer exposes files outside sandbox CVSS 4.0HIGH 8.7
TI-2026-46184 Network-AI before 5.13.4 Cryptographic Signature Verification Bypass CVSS 4.0HIGH 8.8
TI-2026-38985 Network-AI has an an OS Command Injection issue CVSS 3.1CRITICAL 9.9
TI-2026-83677 Path traversal in Network-AI FileJobStore lets attackers read or delete files CVSS 4.0HIGH 8.7

See all 19 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences