{"id":"EUVD-2026-29164","enisaUuid":"c2e137dc-3ab0-341c-ade2-353d4a68146b","description":"Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to 5.1.3, the MCP HTTP transport accepts JSON-RPC tools/call requests with no authentication, session, origin, or token check, and dispatches them directly to the orchestrator\u0027s tool registry. The default bind address is 0.0.0.0. As a result, any party with network reachability to the service can enumerate and invoke privileged management tools. This vulnerability is fixed in 5.1.3.","datePublished":"May 11, 2026, 5:42:35 PM","dateUpdated":"May 11, 2026, 6:33:59 PM","baseScore":8.7,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/Jovancoding/Network-AI/security/advisories/GHSA-fj4g-2p96-q6m3\n","aliases":"CVE-2026-42856\nGHSA-fj4g-2p96-q6m3\n","assigner":"GitHub_M","epss":0.55,"enisaIdProduct":[{"id":"b56dd4ec-dfc1-3027-8e8b-829916538ecc","product":{"name":"Network-AI","vendor":{"name":"Jovancoding"}},"product_version":"\u003c 5.1.3"}],"enisaIdVendor":[{"id":"8019ee3d-b83d-3f0d-b1f5-615c812d142e","vendor":{"name":"Jovancoding"}}],"enisaIdVulnerability":[{"id":"900c44d4-39ef-3626-aa43-f72b1e23a618","vulnerability":{"id":"GHSA-fj4g-2p96-q6m3","description":"Network-AI missing authentication on MCP HTTP endpoint, which allows unauthenticated privileged tool calls","datePublished":"May 5, 2026, 5:25:37 PM","dateUpdated":"May 13, 2026, 2:17:54 PM","baseScore":0.0,"references":"https://github.com/Jovancoding/Network-AI/security/advisories/GHSA-fj4g-2p96-q6m3\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-42856\nhttps://github.com/Jovancoding/Network-AI\n","enisa_id":"EUVD-2026-29164\n","aliases":"CVE-2026-42856\nGHSA-fj4g-2p96-q6m3\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:00:21 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"deb13963-8959-3bc7-a866-7b4aef013b8d","vulnerability":{"id":"CVE-2026-42856","description":"Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to 5.1.3, the MCP HTTP transport accepts JSON-RPC tools/call requests with no authentication, session, origin, or token check, and dispatches them directly to the orchestrator\u0027s tool registry. The default bind address is 0.0.0.0. As a result, any party with network reachability to the service can enumerate and invoke privileged management tools. This vulnerability is fixed in 5.1.3.","datePublished":"May 11, 2026, 5:42:35 PM","dateUpdated":"May 11, 2026, 6:33:59 PM","status":"PUBLISHED","baseScore":8.7,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/Jovancoding/Network-AI/security/advisories/GHSA-fj4g-2p96-q6m3\n","enisa_id":"EUVD-2026-29164\n","assigner":"GitHub_M","epss":0.55,"dataProcessed":"Nov 7, 2026, 7:20:46 AM","vulnerabilityProduct":[{"id":"775b9aac-f492-3772-8fa6-3b15cbb5318c","product":{"name":"Network-AI","vendor":{"name":"Jovancoding"}},"product_version":"\u003c 5.1.3"}],"vulnerabilityVendor":[{"id":"0e9aae79-9775-349e-9259-01c3636011a7","vendor":{"name":"Jovancoding"}}]}}],"enisaIdAdvisory":[]}