PT-2026-61657 · Unknown · Network-Ai
CVE-2026-58482
·
Published
2026-06-19
·
Updated
2026-07-20
CVSS v3.1
5.9
Medium
| Vector | AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Network-AI versions 5.0.0 through 5.12.1
Description
The
ApprovalInbox feature, located in lib/approval-inbox.ts, serves as the network interface for the human-in-the-loop Approval Gate used to authorize high-risk operations. The associated HTTP server lacks authentication and implements a wildcard CORS policy (Access-Control-Allow-Origin: *) on all routes. This allows unauthorized parties—such as co-located processes, containers via SSRF (Server-Side Request Forgery, a technique to force a server to make requests to an internal resource), or remote clients—to enumerate and approve pending requests. This bypasses the human-in-the-loop control, potentially leading to the unauthorized execution of high-risk actions, such as shell commands. The affected state-changing endpoints are POST /approvals/:id/approve and POST /approvals/:id/deny.Recommendations
Update to version 5.12.2.
When exposing the inbox on a network, configure the
secret option to enable authentication for the POST /:id/approve and POST /:id/deny endpoints via an Authorization: Bearer <secret> header.Exploit
Fix
CSRF
Missing Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Network-Ai