HIGH 8.7 NVD
CVE-2026-73615
Network-AI versions before 5.15.1 contain a security matcher bypass vulnerability where SandboxPolicy evaluates raw command strings with quotes preserved while
Network-AI versions before 5.15.1 contain a security matcher bypass vulnerability where SandboxPolicy evaluates raw command strings with quotes preserved while the executor tokenizes commands by stripping quotes before execution. Attackers can craft quoted commands that evade blocklist checks and approval gates while the executor runs the identical unquoted dangerous argv.
References
- https://github.com/Jovancoding/Network-AI/security/advisories/GHSA-9v4f-j8cv-fhxw
- https://www.vulncheck.com/advisories/network-ai-sandboxpolicy-before-blocklist-bypass-via-
This high severity vulnerability with a CVSS score of 8.7 was published on 2026-08-13 via NVD.
vulnfeed aggregates 10540 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.