NE
Product
Network-AI
16
CVEs
0
On KEV
9.9
Max CVSS
3
New 30D
Severity mix
Critical 2High 8Medium 5Low 1
Watch
Add Network-AI to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-58481 | 6.5 | Jul 20 | Network-AI: AgentRuntime sandbox path-prefix checks allow file access outside the configured base directory Affected: < 5.12.2 |
| CVE-2026-58413 | 6.1 | Jul 20 | EnvironmentManager.restore() backup ID path traversal copies arbitrary directories into environment data Affected: < 5.12.2 |
| CVE-2026-58482 | 5.9 | Jul 20 | Network-AI: ApprovalInbox HTTP server has no authentication — anyone can approve pending agent actions Affected: >= 5.0.0, < 5.12.2 |
| CVE-2026-58414 | 5.5 | Jul 20 | Network-AI: EnvironmentManager.backup() follows symlinked directories and copies files outside the environment root into backups Affected: < 5.12.2 |
| CVE-2026-109330 | 4.3 | Oct 12 | Network-AI 5.0.0 before 5.15.2 Cross-Site WebSocket Hijacking via DashboardServer Affected: 5.0.0 before 5.15.2 |
Showing 5