PT-2026-50534 · Jovancoding · Network-Ai

Published 2026-06-17 · Updated 2026-06-18 · CVE-2026-48814

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Network-AI versions prior to 5.7.2

Description The MCP SSE server allows unauthenticated cross-origin MCP tool invocation because the server defaults to an empty secret and the isAuthorized() function returns true when the secret is empty. While a previous update restricted CORS to localhost origins, the server remains unauthenticated by default for non-browser callers, such as curl or SSRF. This allows unauthorized access to 22 MCP tools, including config set, agent spawn, blackboard write, and token * functions, especially when a non-loopback bind is used.

Recommendations Update to version 5.7.2.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2026-48814

Affected Products

Network-Ai

References · 5

• https://github.com/Jovancoding/Network-AI/releases/tag/v5.7.2 · Note
• https://github.com/Jovancoding/Network-AI/security/advisories/GHSA-r78r-rwrf-rjwp · Note
• https://github.com/advisories/GHSA-j3vx-cx2r-pvg8 · Note
• https://twitter.com/CVEnew/status/2067350979750617222 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2067402018172395698 · Twitter Post