CVE-2026-109330
4.3MediumPublished 12 Oct 2026 · NVD status: Deferred · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
- Impact
- Limited impact
- Weakness
- CWE-1385
Impact
Remote attackers can steal live agent topology, IDs, roles, task descriptions, and token budgets if a user visits a malicious website while running the dashboard locally. The attacker requires the victim to open a malicious link in their browser.
Root cause
DashboardServer's handleUpgrade does not validate WebSocket Origin headers or authentication tokens.
Affected systems
Network-AI 5.0.0 before 5.15.2
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Fix & remediation
Upgrade Network-AI to version 5.15.2 or later. If you cannot patch immediately, shut down DashboardServer or avoid browsing external websites while the dashboard is running on loopback.
$ pip install --upgrade 'Network-AI>=5.15.2'AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
Network-AI 5.0.0 before 5.15.2 contains a cross-site WebSocket hijacking vulnerability in DashboardServer that allows remote attackers to read live agent topology because handleUpgrade performs no Origin or token validation. Attackers can lure a victim running the dashboard to a malicious page that opens a WebSocket to the loopback dashboard and exfiltrates agent IDs, roles, task descriptions, and token budgets.