# network-ai (npm) vulnerabilities 9 known vulnerabilities (2 critical, 3 high, 4 medium), with the versions each affects and the releases that fix them. ## At a glance - Latest release: 6.0.1 (Nov 7, 2026): no advisory affects it - Newest unaffected release: 6.0.1 (Nov 7, 2026), the latest release - Weekly downloads: 2,683 - Dependents: 0 - Releases: 181 since 3.0.0 (Feb 15, 2026) - Registry: https://www.npmjs.com/package/network-ai - Releases read: Nov 8, 2026 ## Version timeline Affected versions per advisory, in version order: - CVE-2026-58484: 3.0.0 to 5.12.1 (5.12.2 is outside it) - CVE-2026-58482: 5.0.0 to 5.12.1 (5.12.2 is outside it) - CVE-2026-46701: 3.0.0 to 5.4.4 (5.4.5 is outside it) - CVE-2026-58481: 3.0.0 to 5.12.1 (5.12.2 is outside it) - CVE-2026-58414: 3.0.0 to 5.12.1 (5.12.2 is outside it) - CVE-2026-58413: 3.0.0 to 5.12.1 (5.12.2 is outside it) - CVE-2026-54051: 3.0.0 to 5.9.0 (5.9.1 is outside it) - CVE-2026-48814: 3.0.0 to 5.7.1 (5.7.2 is outside it) - CVE-2026-42856: 3.0.0 to 5.1.2 (5.1.3 is outside it) ## Advisories (9) ### [CVE-2026-58484](https://cve.now/CVE-2026-58484): Network-AI: Poisoned environment backup manifest allows arbitrary recursive deletion during backup pruning - Severity: High 7.1 - Published: Jul 20, 2026 - Affected: fixed in 5.12.2. - Fixed in 5.12.2 (released Jun 18, 2026, 32 days before disclosure). - The latest release, 6.0.1, is not affected. - 41% of network-ai downloads last week were affected versions (861). ### [CVE-2026-58482](https://cve.now/CVE-2026-58482): Network-AI: ApprovalInbox HTTP server has no authentication — anyone can approve pending agent actions - Severity: Medium 5.9 - Published: Jul 20, 2026 - Affected: from 5.0.0, fixed in 5.12.2. - Fixed in 5.12.2 (released Jun 18, 2026, 32 days before disclosure). - The latest release, 6.0.1, is not affected. - 21% of network-ai downloads last week were affected versions (438). ### [CVE-2026-46701](https://cve.now/CVE-2026-46701): Network-AI: Unauthenticated Cross-Origin MCP Tool Invocation via Empty Default Secret - Severity: High 7.6 - Published: Jul 20, 2026 - Affected: fixed in 5.4.5. - Fixed in 5.4.5 (released May 16, 2026, 65 days before disclosure). - The latest release, 6.0.1, is not affected. - 26% of network-ai downloads last week were affected versions (561). ### [CVE-2026-58481](https://cve.now/CVE-2026-58481): Network-AI: AgentRuntime sandbox path-prefix checks allow file access outside the configured base directory - Severity: Medium 6.5 - Published: Jul 20, 2026 - Affected: fixed in 5.12.2. - Fixed in 5.12.2 (released Jun 18, 2026, 32 days before disclosure). - The latest release, 6.0.1, is not affected. - 41% of network-ai downloads last week were affected versions (861). ### [CVE-2026-58414](https://cve.now/CVE-2026-58414): Network-AI: EnvironmentManager.backup() follows symlinked directories and copies files outside the environment root into backups - Severity: Medium 5.5 - Published: Jul 20, 2026 - Affected: fixed in 5.12.2. - Fixed in 5.12.2 (released Jun 18, 2026, 32 days before disclosure). - The latest release, 6.0.1, is not affected. - 41% of network-ai downloads last week were affected versions (861). ### [CVE-2026-58413](https://cve.now/CVE-2026-58413): EnvironmentManager.restore() backup ID path traversal copies arbitrary directories into environment data - Severity: Medium 6.1 - Published: Jul 20, 2026 - Affected: fixed in 5.12.2. - Fixed in 5.12.2 (released Jun 18, 2026, 32 days before disclosure). - The latest release, 6.0.1, is not affected. - 41% of network-ai downloads last week were affected versions (861). ### [CVE-2026-54051](https://cve.now/CVE-2026-54051): Network-AI has an an OS Command Injection issue - Severity: Critical 9.9 - Published: Jul 20, 2026 - Affected: fixed in 5.9.1. - Fixed in 5.9.1 (released Jun 2, 2026, 48 days before disclosure). - The latest release, 6.0.1, is not affected. - 37% of network-ai downloads last week were affected versions (791). ### [CVE-2026-48814](https://cve.now/CVE-2026-48814): Network-AI: Empty default secret still authorizes all requests (Incomplete fix for CVE-2026-46701) - Severity: Critical 9.1 - Published: Jun 17, 2026 - Affected: fixed in 5.7.2. - Fixed in 5.7.2 (released May 23, 2026, 25 days before disclosure). - The latest release, 6.0.1, is not affected. - 32% of network-ai downloads last week were affected versions (686). ### [CVE-2026-42856](https://cve.now/CVE-2026-42856): Network-AI: Missing authentication on MCP HTTP endpoint allows unauthenticated privileged tool calls - Severity: High 8.7 - Published: May 11, 2026 - Affected: fixed in 5.1.3. - Fixed in 5.1.3 (released Apr 23, 2026, 18 days before disclosure). - The latest release, 6.0.1, is not affected. - 22% of network-ai downloads last week were affected versions (460). --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/packages/npm/network-ai Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.