{"data":{"id":"4aa802fe-283e-4c43-b2c6-bd1c9a54d8f0","title":"GHSA-mxjx-28vx-xjjj: Network-AI: ApprovalInbox HTTP server has no authentication — anyone can approve pending agent actions ","summary":"The ApprovalInbox HTTP server in network-ai (lib/approval-inbox.ts) has no authentication on any route and sets Access-Control-Allow-Origin: * on every route, including the state-changing POST /approvals/:id/approve and /deny. Any party able to reach the inbox port, including websites visited by the operator through wildcard CORS, can list pending approvals and approve them, which resolves the gate so the held high-risk action proceeds without consent. Affected versions are network-ai <= 5.11.0, and the flaw is mapped to CWE-862 and CWE-352.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-mxjx-28vx-xjjj","publishedAt":"2026-06-19T21:42:32.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["network-ai@>= 5.0.0, <= 5.12.1 (fixed: 5.12.2)"],"affectedPackageNames":["network-ai"],"affectedPackageRefs":["npm:network-ai"],"affectedVendors":[],"affectedVendorsRaw":["network-ai","ApprovalInbox","ApprovalGate"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":["GHSA-mxjx-28vx-xjjj"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-06-19T21:42:32.000Z","fixReleasedAt":"2026-06-18T21:17:50.389Z","daysToFix":-1,"fixCheckedAt":"2026-10-29T21:34:05.391Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","safety"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"network-ai","fixedVersion":"5.12.2","matchedVersion":"5.12.2","fixReleasedAt":"2026-06-18T21:17:50.389Z","daysToFix":-1,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:34:05.246Z"}]}}