Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Jovancoding Network-AI 5.15.1 Clear all filters
TI-2026-51699 CVE-2026-73615 · GHSA-x5mx-wq8q-46ph

Network-AI SandboxPolicy before 5.15.1 Blocklist Bypass via Quote Mismatch

Priority HIGH 73

Network-AI versions before 5.15.1 contain a security matcher bypass vulnerability where SandboxPolicy evaluates raw command strings with quotes preserved while the executor tokenizes commands by stripping quotes before e…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00654 Published 2026-08-13 Fixed in 5.15.1 CWE-436
TI-2026-51698 CVE-2026-73614 · GHSA-64vj-7c55-24w2

Network-AI ClaudeHookBridge Deny Pattern Bypass via Truncation

Priority HIGH 73

Network-AI ClaudeHookBridge before 5.15.1 truncates the target string to 500 characters before evaluating denyPatterns, while Claude Code executes the full untruncated command.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00679 Published 2026-08-13 Fixed in 5.15.1 CWE-436