CVE-2026-58482: Jovancoding Network-AI missing authentication in ApprovalInbox

CVE-2026-58482 · Severity: medium · CVSS 5.9 · Published 2026-07-20

Network-AI, a tool used to coordinate multiple AI agents, contains a security flaw in its human-approval system. This system is designed to stop AI agents from performing high-risk actions, like running shell commands, until a person manually approves them. Due to a lack of authentication and insecure web settings, an attacker—or even a malicious website visited by the operator—could bypass this safeguard and force the AI to execute dangerous commands without the user's consent.

Technologies: Jovancoding Network-AI, network-ai (npm). Vendors: Jovancoding, npm.

Quick answers

Is CVE-2026-58482 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-58482 being exploited in the wild.
How severe is CVE-2026-58482?
Medium severity, with a CVSS score of 5.9, published 20 July 2026.
Which products and versions are affected?
Jovancoding Network-AI >= 5.0.0, <= 5.12.1; network-ai (npm) SEMVER:introduced=5.0.0,fixed=5.12.2.
Is there a fix for CVE-2026-58482?
Yes. network-ai (npm): upgrade to 5.12.2 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-58482 attacked?
It is attacked over the network, in a software library.
Am I affected by CVE-2026-58482?
Check whether you run Jovancoding Network-AI or network-ai (npm) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

  • network-ai (npm): upgrade to 5.12.2 or later
    npm install network-ai@5.12.2

Technical details

The `ApprovalInbox` component in `lib/approval-inbox.ts` exposes an HTTP server that lacks any authentication mechanism for its REST API. Furthermore, the server implements a wildcard `Access-Control-Allow-Origin: *` policy, making it susceptible to Cross-Site Request Forgery (CSRF) via a user's browser. An attacker can enumerate pending approvals via `GET /approvals/` and trigger state-changing actions via `POST /approvals/:id/approve`. This effectively bypasses the 'human-in-the-loop' security gate, allowing for the unauthorized execution of gated actions such as shell commands or financial transactions. The vulnerability is addressed in version 5.12.2 by introducing a mandatory `secret` option for network-exposed instances and implementing constant-time token validation.

Affected products

  • Jovancoding Network-AI >= 5.0.0, <= 5.12.1

Identifiers

  • CVE-2026-58482
  • GHSA-mxjx-28vx-xjjj

Timeline

  • 2026-06-18: patched: Fixed in version 5.12.2
  • 2026-07-20: disclosed: CVE-2026-58482 published

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.