Product by Jovancoding
Jovancoding Network-AI
20 known vulnerabilities in Jovancoding Network-AI (Jovancoding), 0 of them actively exploited (CISA KEV).
Key figures
20
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-120313 | Network-AI before 5.15.5 Path Traversal via InputSanitizer.sanitizePath | 7.5 | |
| High | CVE-2026-73614 | Network-AI ClaudeHookBridge Deny Pattern Bypass via Truncation | 8.8 | |
| High | CVE-2026-73615 | Network-AI SandboxPolicy before 5.15.1 Blocklist Bypass via Quote Mismatch | 8.8 | |
| High | CVE-2026-120312 | Network-AI 5.13.4 before 5.15.5 Path Traversal via AgentVCR Cassette Name | 8.8 | |
| High | CVE-2026-120311 | Network-AI 5.13.4 before 5.15.5 Path Traversal via FileJobStore Job ID | 8.8 | |
| Critical | CVE-2026-54051 | Network-AI has an an OS Command Injection issue | 9.9 | |
| Critical | CVE-2026-64622 | Network-AI 5.12.2 through 5.13.3 Missing Authorization via ApprovalInbox | 7.5 | |
| High | CVE-2026-42856 | Network-AI: Missing authentication on MCP HTTP endpoint allows unauthenticated privileged tool calls | — | |
| Critical | CVE-2026-48814 | Network-AI: Empty default secret still authorizes all requests (Incomplete fix for CVE-2026-46701) | 9.1 | |
| High | CVE-2026-120314 | Network-AI 5.14.0 before 5.15.5 Missing Authentication in A2AServer Task Operations | 7.3 | |
| High | CVE-2026-109331 | Network-AI 5.14.0 before 5.15.2 Deny Pattern Bypass via ClaudeHookBridge extractFullTarget | 7.4 | |
| High | CVE-2026-64623 | Network-AI before 5.13.4 Cryptographic Signature Verification Bypass | 8.6 | |
| High | CVE-2026-46701 | Network-AI: Unauthenticated Cross-Origin MCP Tool Invocation via Empty Default Secret | 7.6 | |
| Medium | CVE-2026-109330 | Network-AI 5.0.0 before 5.15.2 Cross-Site WebSocket Hijacking via DashboardServer | 4.3 | |
| High | CVE-2026-58484 | Jovancoding Network-AI: Path Traversal | 7.1 | |
| Medium | CVE-2026-58481 | Jovancoding Network-AI: Path Traversal | 6.5 | |
| Medium | CVE-2026-58413 | Jovancoding Network-AI: Path Traversal | 6.1 | |
| Medium | CVE-2026-58482 | Jovancoding Network-AI: Cross-Site Request Forgery (CSRF) | 5.9 | |
| Medium | CVE-2026-58414 | Jovancoding Network-AI: Path Traversal | 5.5 | |
| Low | CVE-2026-109332 | Network-AI before 5.15.2 CORS Origin Validation Error in MCP SSE Transport | 3.1 |