CVE-2026-48814 Details
Description
Network-AI is a TypeScript/Node.js multi-agent orchestrator. In versions 5.7.1 and earlier, the MCP SSE server allows unauthenticated cross-origin MCP tool invocation due to an empty default secret. This issue was partially addressed by CVE-2026-46701 in version 5.4.5 by closing the CORS flaw (with Access-Control-Allow-Origin now set only for localhost origins), but the empty-default-secret flaw described in the title remained: the SSE MCP server still defaulted to an empty secret, _isAuthorized() still returned true when the secret was empty, and a non-loopback bind only produced a warning. As a result, the server still ran fully unauthenticated by default. Any non-browser caller (for example, curl, SSRF, or a 0.0.0.0 bind) could invoke all 22 MCP tools (config_set, agent_spawn, blackboard_write, token_*) with no credentials. This issue was fixed in version 5.7.2.
A vulnerability in Network-AI, a TypeScript/Node.js multi-agent orchestrator, allows unauthenticated cross-origin invocation of MCP tools due to an empty default secret in versions 5.7.1 and earlier. The issue arises because the MCP SSE server defaults to an empty secret, which the authorization function interprets as valid, thereby granting unrestricted access to all MCP tools. Although version 5.4.5 partially addressed this issue by restricting CORS to localhost origins, the authorization flaw remained, leaving the server fully unauthenticated by default. This vulnerability could be exploited by any non-browser caller, such as curl or through server-side request forgery (SSRF), to invoke all 22 MCP tools without credentials.
Users can upgrade to Network-AI version 5.7.2, which addresses this vulnerability by requiring a non-empty secret for authorization and restricting CORS to localhost origins only.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jun 17, 2026CISA-ADP
Assessed Jun 18, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/Jovancoding/Network-AI/security/advisories/GHSA-r78r-rwrf-rjwp | CISA-ADP | AdvisoryExploitRemedyVendor |
| https://github.com/advisories/GHSA-j3vx-cx2r-pvg8 | [email protected] | AdvisoryBundleRemedyVendor |
| https://github.com/Jovancoding/Network-AI/releases/tag/v5.7.2 | [email protected] | Release NotesVendor |
| https://github.com/Jovancoding/Network-AI/security/advisories/GHSA-r78r-rwrf-rjwp | [email protected] | AdvisoryExploitRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-306 | Missing Authentication for Critical Function | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Jovancoding Network-AI | <= 5.7.1 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 18, 2026 | CVE Modified | CISA-ADP |
| Jun 17, 2026 | New CVE Received | [email protected] |