CVE-2026-109332
3.1LowPublished 12 Oct 2026 · NVD status: Deferred · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- Required
- Impact
- Limited impact
- Weakness
- CWE-346
Impact
Remote attackers can read unauthenticated server endpoints (like /health) cross-origin. To exploit this, they must trick a victim into visiting a malicious webpage capable of sending requests with a localhost Origin while the server is bound to a non-loopback interface.
Root cause
McpSseServer._handleRequest automatically reflects localhost Origins into the Access-Control-Allow-Origin header regardless of the actual network bind address.
Affected systems
Network-AI (npm package network-ai) prior to version 5.15.2
CVSS v3.1 · CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
Fix & remediation
Upgrade network-ai to version 5.15.2 or later. If updating immediately is not possible, ensure the server only binds to loopback interfaces (e.g., 127.0.0.1) instead of external or 0.0.0.0 addresses.
$ npm install network-ai@5.15.2AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
Network-AI (npm network-ai) before 5.15.2 contains an origin validation error in McpSseServer._handleRequest in lib/mcp-transport-sse.ts that reflects localhost Origins into Access-Control-Allow-Origin regardless of bind interface. When the server binds a non-loopback address, an attacker page with a localhost Origin visited by a victim can read unauthenticated endpoints like /health cross-origin.