Network-AI (npm package network-ai) versions 5.12.2 through 5.13.3 fail to enforce the configured authorization check (checkAuth/secret) on the ApprovalInbox GET read routes. This allows unauthenticated actors to access sensitive approval request data via the GET /approvals/?status=all, GET /approvals/:id, GET /approvals/stats, and GET /approvals/sse endpoints. The disclosed data includes action and target shell-command strings, file paths, justifications, and risk levels. The responses also include a hardcoded Access-Control-Allow-Origin: * header, which enables cross-origin resource sharing from any website, increasing the risk of data leakage. This issue is noted as an incomplete fix of a prior security advisory GHSA-mxjx-28vx-xjjj.

Unauthenticated attackers can access sensitive approval request information without authorization, including potentially dangerous shell-command strings and file paths. The presence of a permissive Access-Control-Allow-Origin header allows any website to read this data via cross-origin requests, increasing the risk of data exposure. This could lead to information disclosure that may aid further attacks or unauthorized actions within the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided at this time. Until a fix is available, restrict network access to the affected endpoints and avoid exposing the service to untrusted networks. Monitor vendor communications for updates regarding an official fix or temporary mitigation.