Security advisories

medium2026-06-19

Network-AI: EnvironmentManager.restore() backup ID path traversal copies arbitrary directories into environment data

GHSA-48x2-6pr9-2jjf

medium2026-06-19

Network-AI: EnvironmentManager.backup() follows symlinked directories and copies files outside the environment root into backups

GHSA-6x2m-p4xp-wg22

medium2026-06-19

Network-AI: ApprovalInbox HTTP server has no authentication — anyone can approve pending agent actions

GHSA-mxjx-28vx-xjjj

medium2026-06-19

Network-AI: AgentRuntime sandbox path-prefix checks allow file access outside the configured base directory

GHSA-jvcm-f35g-w78p

high2026-06-19

Network-AI: Poisoned environment backup manifest allows arbitrary recursive deletion during backup pruning

GHSA-2fmp-9rvw-hc96

critical2026-06-19

Network-AI: Improper Neutralization of Special Elements used in an OS Command

GHSA-qw6v-5fcf-5666 · CVE-2026-54051

critical2026-06-19

Network-AI: CVE-2026-46701 fix incomplete — empty default secret still authorizes all requests

GHSA-r78r-rwrf-rjwp · CVE-2026-48814

high2026-05-21

Network-AI: Unauthenticated Cross-Origin MCP Tool Invocation via Empty Default Secret

GHSA-j3vx-cx2r-pvg8 · CVE-2026-46701

high2026-05-05

Network-AI missing authentication on MCP HTTP endpoint, which allows unauthenticated privileged tool calls

GHSA-fj4g-2p96-q6m3 · CVE-2026-42856