{"data":{"id":"78a37bbb-8c56-4c88-a99e-c1676af56dd9","title":"GHSA-fj4g-2p96-q6m3: Network-AI missing authentication on MCP HTTP endpoint, which allows unauthenticated privileged tool calls","summary":"Network-AI version 5.1.2 (commit c344f2053eb0d49395988f803bf92f2a86b2a0d0) accepts JSON-RPC tools/call requests on its MCP HTTP transport with no authentication, session, origin or token check, dispatching them straight to the orchestrator's tool registry. The default bind address is 0.0.0.0, so any party with network reachability can list and invoke privileged tools such as config_get and config_set, agent_spawn, token_create and budget_set_ceiling. The advisory is rated High (CWE-306) and was validated on 2026-04-21 with a proof of concept that changed a live configuration value without credentials.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-fj4g-2p96-q6m3","publishedAt":"2026-05-05T17:25:37.000Z","cveId":"CVE-2026-42856","cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["network-ai@<= 5.1.2 (fixed: 5.1.3)"],"affectedPackageNames":["network-ai"],"affectedPackageRefs":["npm:network-ai"],"affectedVendors":[],"affectedVendorsRaw":["Network-AI","MCP (Model Context Protocol)"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00549,"epssCheckedAt":"2026-11-08T00:10:11.651Z","kevDateAdded":null,"advisoryAliases":["GHSA-fj4g-2p96-q6m3"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-05-05T17:25:37.000Z","fixReleasedAt":"2026-04-23T16:15:09.041Z","daysToFix":-12,"fixCheckedAt":"2026-10-29T21:36:57.685Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"network-ai","fixedVersion":"5.1.3","matchedVersion":"5.1.3","fixReleasedAt":"2026-04-23T16:15:09.041Z","daysToFix":-12,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:36:57.539Z"}]}}