Network-AI has an an OS Command Injection issue

Network-AI: Empty default secret still authorizes all requests (Incomplete fix for CVE-2026-46701)

Network-AI SandboxPolicy before 5.15.1 Blocklist Bypass via Quote Mismatch

Network-AI ClaudeHookBridge Deny Pattern Bypass via Truncation

Network-AI: Missing authentication on MCP HTTP endpoint allows unauthenticated privileged tool calls

Network-AI before 5.13.4 Cryptographic Signature Verification Bypass

Network-AI: Unauthenticated Cross-Origin MCP Tool Invocation via Empty Default Secret

Network-AI 5.12.2 through 5.13.3 Missing Authorization via ApprovalInbox

Network-AI 5.14.0 before 5.15.2 Deny Pattern Bypass via ClaudeHookBridge extractFullTarget

Network-AI: Poisoned environment backup manifest allows arbitrary recursive deletion during backup pruning

Network-AI: AgentRuntime sandbox path-prefix checks allow file access outside the configured base directory

EnvironmentManager.restore() backup ID path traversal copies arbitrary directories into environment data

Network-AI: ApprovalInbox HTTP server has no authentication — anyone can approve pending agent actions

Network-AI: EnvironmentManager.backup() follows symlinked directories and copies files outside the environment root into backups

Network-AI 5.0.0 before 5.15.2 Cross-Site WebSocket Hijacking via DashboardServer

Network-AI before 5.15.2 CORS Origin Validation Error in MCP SSE Transport