{"data":{"id":"6ed8febe-a204-4eb9-9f06-37f167eb49ce","title":"GHSA-r78r-rwrf-rjwp: Network-AI: CVE-2026-46701 fix incomplete — empty default secret still authorizes all requests","summary":"The fix for CVE-2026-46701 in Network-AI, npm package network-ai, is incomplete on the latest v5.7.1. The 5.4.5 release restricted Access-Control-Allow-Origin to localhost origins, but the SSE MCP server still defaults to an empty secret, and _isAuthorized() returns true when the secret is empty. Any non-browser caller can therefore invoke all 22 MCP tools without credentials, including config_set, agent_spawn, blackboard_write and token_* tools.","solution":"Implement the advisory's remediation #1: refuse to start SSE mode with an empty secret (unless --stdio), and/or make _isAuthorized fail closed so an empty configured secret denies requests. The CORS allowlist alone does not authenticate non-browser callers.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-r78r-rwrf-rjwp","publishedAt":"2026-06-19T13:34:24.000Z","cveId":"CVE-2026-48814","cweIds":null,"cvssScore":null,"cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":["network-ai@<= 5.7.1 (fixed: 5.7.2)"],"affectedPackageNames":["network-ai"],"affectedPackageRefs":["npm:network-ai"],"affectedVendors":[],"affectedVendorsRaw":["Network-AI","network-ai (npm)","MCP server"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00445,"epssCheckedAt":"2026-11-04T06:10:15.975Z","kevDateAdded":null,"advisoryAliases":["GHSA-r78r-rwrf-rjwp"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-06-19T13:34:24.000Z","fixReleasedAt":"2026-05-23T15:51:28.932Z","daysToFix":-27,"fixCheckedAt":"2026-10-29T21:34:17.142Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.93,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"network-ai","fixedVersion":"5.7.2","matchedVersion":"5.7.2","fixReleasedAt":"2026-05-23T15:51:28.932Z","daysToFix":-27,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:34:16.993Z"}]}}