Skip to main content
cve.nowby Sazabi
← npm
npmPackage

network-ai

9 known vulnerabilities (2 critical, 3 high, 4 medium), with the versions each affects and the releases that fix them.

Latest release
6.0.1 (Nov 7, 2026): no advisory affects it
Newest unaffected release
6.0.1 (Nov 7, 2026), the latest release
Advisories
9 · 2 critical, 3 high, 4 medium
Weekly downloads
2,683
Dependents
0
Releases
181 since 3.0.0 (Feb 15, 2026)
Registry
npm
Releases read
Nov 8, 2026

Version timeline

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 9

  • Network-AI: Poisoned environment backup manifest allows arbitrary recursive deletion during backup pruning

    Affected: fixed in 5.12.2.

    Fixed in 5.12.2 (released Jun 18, 2026, 32 days before disclosure).

    The latest release, 6.0.1, is not affected.

    41% of network-ai downloads last week were affected versions (861).

  • CVE-2026-58482Medium 5.9

    Network-AI: ApprovalInbox HTTP server has no authentication — anyone can approve pending agent actions

    Affected: from 5.0.0, fixed in 5.12.2.

    Fixed in 5.12.2 (released Jun 18, 2026, 32 days before disclosure).

    The latest release, 6.0.1, is not affected.

    21% of network-ai downloads last week were affected versions (438).

  • Network-AI: Unauthenticated Cross-Origin MCP Tool Invocation via Empty Default Secret

    Affected: fixed in 5.4.5.

    Fixed in 5.4.5 (released May 16, 2026, 65 days before disclosure).

    The latest release, 6.0.1, is not affected.

    26% of network-ai downloads last week were affected versions (561).

  • CVE-2026-58481Medium 6.5

    Network-AI: AgentRuntime sandbox path-prefix checks allow file access outside the configured base directory

    Affected: fixed in 5.12.2.

    Fixed in 5.12.2 (released Jun 18, 2026, 32 days before disclosure).

    The latest release, 6.0.1, is not affected.

    41% of network-ai downloads last week were affected versions (861).

  • CVE-2026-58414Medium 5.5

    Network-AI: EnvironmentManager.backup() follows symlinked directories and copies files outside the environment root into backups

    Affected: fixed in 5.12.2.

    Fixed in 5.12.2 (released Jun 18, 2026, 32 days before disclosure).

    The latest release, 6.0.1, is not affected.

    41% of network-ai downloads last week were affected versions (861).

  • CVE-2026-58413Medium 6.1

    EnvironmentManager.restore() backup ID path traversal copies arbitrary directories into environment data

    Affected: fixed in 5.12.2.

    Fixed in 5.12.2 (released Jun 18, 2026, 32 days before disclosure).

    The latest release, 6.0.1, is not affected.

    41% of network-ai downloads last week were affected versions (861).

  • CVE-2026-54051Critical 9.9

    Network-AI has an an OS Command Injection issue

    Affected: fixed in 5.9.1.

    Fixed in 5.9.1 (released Jun 2, 2026, 48 days before disclosure).

    The latest release, 6.0.1, is not affected.

    37% of network-ai downloads last week were affected versions (791).

  • CVE-2026-48814Critical 9.1

    Network-AI: Empty default secret still authorizes all requests (Incomplete fix for CVE-2026-46701)

    Affected: fixed in 5.7.2.

    Fixed in 5.7.2 (released May 23, 2026, 25 days before disclosure).

    The latest release, 6.0.1, is not affected.

    32% of network-ai downloads last week were affected versions (686).

  • Network-AI: Missing authentication on MCP HTTP endpoint allows unauthenticated privileged tool calls

    Affected: fixed in 5.1.3.

    Fixed in 5.1.3 (released Apr 23, 2026, 18 days before disclosure).

    The latest release, 6.0.1, is not affected.

    22% of network-ai downloads last week were affected versions (460).