CVE-2026-73614: Network-AI ClaudeHookBridge before 5.15.1 truncates the target string to 500 characters before evaluating denyPatterns,

ClaudeHookBridge (a tool that connects Claude AI to network systems) before version 5.15.1 has a security flaw where it shortens commands to 500 characters before checking a blocklist (denyPatterns), but then executes the full original command. Attackers can hide dangerous code after the 500-character limit to bypass security checks and run unauthorized commands on the system.