# CVE-2026-109330: Network-AI DashboardServer cross-site WebSocket hijacking

Source: https://junglewise.ai/threats/cve-2026-109330-network-ai-5-0-0-before-5-15-2-contains-a-cross-site-websocket  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-12. Updated: 2026-10-16  
License: CC BY 4.0 with a link back

CVE-2026-109330 · Severity: medium · CVSS 4.3 · Published 2026-10-12

Network-AI is an orchestration and task management platform whose DashboardServer component exposes live agent topology (IDs, roles, task descriptions, budgets) via an unauthenticated WebSocket. An attacker can trick a user running the dashboard into visiting a malicious webpage, which opens a WebSocket connection to the local dashboard and steals this sensitive orchestration data.

Technologies: [Jovancoding Network-AI](https://junglewise.ai/threats/technologies/network-ai). Vendors: [Jovancoding](https://junglewise.ai/threats/vendors/jovancoding).

## Quick answers

**Is CVE-2026-109330 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-109330 being exploited in the wild.

**How severe is CVE-2026-109330?** Medium severity, with a CVSS score of 4.3, published 12 October 2026.

**Which products and versions are affected?** Jovancoding Network-AI 5.0.0 through 5.15.1.

**Is there a fix for CVE-2026-109330?** Yes: fixed in 5.15.2. Until then: Restrict network access to the DashboardServer endpoint (127.0.0.1:4820 by default) to trusted hosts only, or run the dashboard in an isolated environment until upgrading to version 5.15.2. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-109330 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-109330?** Check whether you run Jovancoding Network-AI at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in 5.15.2

Restrict network access to the DashboardServer endpoint (127.0.0.1:4820 by default) to trusted hosts only, or run the dashboard in an isolated environment until upgrading to version 5.15.2.

## Technical details

The DashboardServer WebSocket handler (dashboard-server.ts:285–379) completes the RFC-6455 handshake unconditionally without validating the Origin header or any authentication token, then immediately sends a topology snapshot. Because browsers do not apply same-origin policy to WebSocket connections, any website can open ws://127.0.0.1:4820 from a victim's browser and exfiltrate agent topology. The vulnerability affects versions 5.0.0 through 5.15.1; the fix validates Origin against an allowlist or requires a shared secret.

## Affected products

- Jovancoding Network-AI 5.0.0 through 5.15.1

## Timeline

- 2026-09-27: disclosed
- 2026-10-12: advisory

## References

- [https://github.com/Jovancoding/Network-AI/security/advisories/GHSA-hr6v-mfxm-4438](https://github.com/Jovancoding/Network-AI/security/advisories/GHSA-hr6v-mfxm-4438)
- [https://www.vulncheck.com/advisories/network-ai-5.0.0-before-5.15.2-cross-site-websocket-hijacking-via-dashboardserver](https://www.vulncheck.com/advisories/network-ai-5.0.0-before-5.15.2-cross-site-websocket-hijacking-via-dashboardserver)

## Related threats

- [Network-AI A2AServer missing authentication in task operations](https://junglewise.ai/threats/cve-2026-120314-network-ai-from-5-14-0-before-5-15-5-contains-a-missing)
- [Network-AI path traversal in InputSanitizer.sanitizePath](https://junglewise.ai/threats/cve-2026-120313-network-ai-before-5-15-5-contains-a-path-traversal-vulnerability)
- [Network-AI AgentVCR path traversal in cassette name](https://junglewise.ai/threats/cve-2026-120312-network-ai-from-5-13-4-before-5-15-5-contains-a-path-traversal)
- [Network-AI FileJobStore path traversal in job ID handling](https://junglewise.ai/threats/cve-2026-120311-network-ai-from-5-13-4-before-5-15-5-contains-a-path-traversal)
- [Network-AI security control bypass in ClaudeHookBridge](https://junglewise.ai/threats/cve-2026-109331-network-ai-from-5-14-0-before-5-15-2-contains-a-security-control)