CVE-2026-58482
1 advisory.
npm/network-ai CVE-2026-58482: medium 5.9
Network-AI: ApprovalInbox HTTP server has no authentication — anyone can approve pending agent actions
Action: Upgrade network-ai to 5.12.2 or later.
npm i network-ai@5.12.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.0.0 | 5.12.2 | - |
Fixed versions
| 5.12.2 |
Sources
- osv: GHSA-mxjx-28vx-xjjj
- https://github.com/Jovancoding/Network-AI/security/advisories/GHSA-mxjx-28vx-xjjj
- https://github.com/Jovancoding/Network-AI/commit/a59c13a1f0ce0e8a0779a90343eef92fac5ab4c3
- https://github.com/Jovancoding/Network-AI
- https://github.com/Jovancoding/Network-AI/releases/tag/v5.12.2
CVE-2026-58482 · published · modified · JSON