{"id":"CVE-2026-109331","aliases":[],"cve":{"records":[{"id":"CVE-2026-109331","source":"VulnCheck","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-12T14:18:12.389Z","published":"2026-10-12T16:05:20.585Z","modified":"2026-10-26T16:46:48.646Z"}],"publishers":[{"name":"VulnCheck","role":"CNA","organizationId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","modified":"2026-10-12T16:05:20.585Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-10-26T16:46:48.646Z"}],"references":[{"url":"https://github.com/Jovancoding/Network-AI/security/advisories/GHSA-9p2w-prp8-5722","tags":["vendor-advisory"],"source":"VulnCheck"},{"url":"https://www.vulncheck.com/advisories/network-ai-5.14.0-before-5.15.2-deny-pattern-bypass-via-claudehookbridge-extractfulltarget","tags":["third-party-advisory"],"source":"VulnCheck"}],"weaknesses":[{"id":"CWE-436","description":"Interpretation Conflict","source":"VulnCheck"}],"applicability":[{"source":"VulnCheck","statements":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:network-ai:network-ai:*:*:*:*:*:*:*:*","versionStartIncluding":"5.14.0","versionEndExcluding":"5.15.2"}]}]}]}],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-10-26T16:32:17.070417Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"Network-AI 5.14.0 before 5.15.2 Deny Pattern Bypass via ClaudeHookBridge extractFullTarget","titleSource":"VulnCheck","descriptionSource":"VulnCheck","description":"Network-AI from 5.14.0 before 5.15.2 contains a security control bypass vulnerability in the ClaudeHookBridge PreToolUse hook, which matches deny patterns only against the first present candidate field. A prompt-injected agent can place dangerous payloads in fields like Write content or an MCP script parameter beside a benign file_path or command, evading denyPatterns to write web shells or execute scripts.","score":7.5,"severity":"high","published":"2026-10-12T16:05:20.585Z","modified":"2026-10-26T16:46:48.646Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Jovancoding","name":"Network-AI","platforms":[],"versions":[{"version":"5.14.0","status":"affected","lessThan":"5.15.2","versionType":"semver"},{"version":"5.15.2","status":"unaffected","versionType":"semver"}],"defaultStatus":"unaffected","packageURL":"pkg:npm/network-ai","packageIdentity":{"ecosystem":"npm","name":"network-ai"},"cpes":[],"source":"VulnCheck","url":"https://www.cve.org/CVERecord?id=CVE-2026-109331"}],"remediation":[],"references":["https://github.com/Jovancoding/Network-AI/security/advisories/GHSA-9p2w-prp8-5722","https://www.vulncheck.com/advisories/network-ai-5.14.0-before-5.15.2-deny-pattern-bypass-via-claudehookbridge-extractfulltarget"],"sources":[{"name":"CVE","id":"CVE-2026-109331","modified":"2026-10-26T16:46:48.646Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-109331"}],"assessments":[{"source":"VulnCheck","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","score":7.5},{"source":"VulnCheck","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","score":7.4}],"sourceAffected":[],"observedAt":"2026-10-29T14:27:11.391Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T09:10:30.844Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[],"aiSummary":{"text":"Network-AI versions 5.14.0 before 5.15.2 have a security control bypass vulnerability in ClaudeHookBridge, allowing a prompt-injected agent to evade deny patterns and execute scripts. The weakness is due to the hook matching deny patterns only against the first candidate field. An attacker can place dangerous payloads in certain fields to bypass security controls.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T09:18:43.505Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-109331"}]}}