CVE-2026-48814: CWE-306: Missing Authentication for Critical Function in Jovancoding Network-AI
Jovancoding Network-AI versions 5.7.1 and earlier contain a critical vulnerability where the MCP SSE server defaults to an empty secret, allowing unauthenticated invocation of all 22 MCP tools. This flaw permits any non-browser client to execute critical functions without credentials. The issue was partially mitigated in version 5.4.5 by restricting CORS to localhost, but the empty secret and authorization bypass remained until fixed in version 5.7.2.
AI Analysis
Technical Summary
Network-AI is a TypeScript/Node.js multi-agent orchestrator. In versions up to 5.7.1, the MCP SSE server has a missing authentication vulnerability due to an empty default secret. The _isAuthorized() function returns true when the secret is empty, allowing unauthenticated access to all MCP tools. Although CVE-2026-46701 partially addressed CORS restrictions in version 5.4.5, the core authentication bypass remained. This allows any non-browser caller, such as curl or SSRF, to invoke critical functions without credentials. The vulnerability was fixed in version 5.7.2.
Potential Impact
An attacker can invoke all 22 MCP tools, including configuration changes, agent spawning, blackboard writing, and token management, without any authentication. This leads to a complete compromise of the affected Network-AI instance's integrity and confidentiality. The CVSS score of 9.1 reflects a critical severity with network attack vector, no privileges required, no user interaction, and high impact on confidentiality and integrity.
Mitigation Recommendations
Upgrade to Network-AI version 5.7.2 or later where the empty default secret issue is fixed, and proper authentication is enforced for MCP SSE server access. No other mitigations are indicated. Patch status is confirmed fixed in 5.7.2.
CVE-2026-48814: CWE-306: Missing Authentication for Critical Function in Jovancoding Network-AI
Description
Jovancoding Network-AI versions 5.7.1 and earlier contain a critical vulnerability where the MCP SSE server defaults to an empty secret, allowing unauthenticated invocation of all 22 MCP tools. This flaw permits any non-browser client to execute critical functions without credentials. The issue was partially mitigated in version 5.4.5 by restricting CORS to localhost, but the empty secret and authorization bypass remained until fixed in version 5.7.2.
CVSS v3.1
Score 9.1critical
Affected software
pkg:github/jovancoding/Network-AIRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Network-AI is a TypeScript/Node.js multi-agent orchestrator. In versions up to 5.7.1, the MCP SSE server has a missing authentication vulnerability due to an empty default secret. The _isAuthorized() function returns true when the secret is empty, allowing unauthenticated access to all MCP tools. Although CVE-2026-46701 partially addressed CORS restrictions in version 5.4.5, the core authentication bypass remained. This allows any non-browser caller, such as curl or SSRF, to invoke critical functions without credentials. The vulnerability was fixed in version 5.7.2.
Potential Impact
An attacker can invoke all 22 MCP tools, including configuration changes, agent spawning, blackboard writing, and token management, without any authentication. This leads to a complete compromise of the affected Network-AI instance's integrity and confidentiality. The CVSS score of 9.1 reflects a critical severity with network attack vector, no privileges required, no user interaction, and high impact on confidentiality and integrity.
Mitigation Recommendations
Upgrade to Network-AI version 5.7.2 or later where the empty default secret issue is fixed, and proper authentication is enforced for MCP SSE server access. No other mitigations are indicated. Patch status is confirmed fixed in 5.7.2.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-05-22T20:57:10.976Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a33019af198dc38c1fe193f
Added to database: 06/17/2026, 20:20:42 UTC
Last enriched: 06/24/2026, 20:52:38 UTC
Last updated: 08/01/2026, 19:18:00 UTC
Views: 140
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.