Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-109331— Network-AI 5.14.0 before 5.15.2 Deny Pattern Bypass via ClaudeHookBridge extractFullTarget

Quick assessment

Affected
Jovancoding Network-AI
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

5.14.0 至 5.15.2（不含 5.15.2）版本的 Network-AI 在 ClaudeHookBridge 的 PreToolUse 钩子中存在安全控制绕过漏洞。该漏洞仅针对第一个存在的候选字段匹配拒绝模式（denyPatterns）。攻击者可通过提示词注入（prompt injection）的代理程序，在 benign（合法）的 file_path 或 command 字段旁边，于诸如“Write content”或 MCP 脚本参数等字段中植入危险载荷，从而绕过拒绝模式检查，写入 Web shell

CVSS 7.4 · High

Affected Version Matrix 2

VendorProduct Version RangeStatus
Jovancoding Network-AI 5.14.0< 5.15.2 affected
5.15.2 unaffected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-109331

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Network-AI 5.14.0 before 5.15.2 Deny Pattern Bypass via ClaudeHookBridge extractFullTarget
Source: CVE Program / CVE List V5
Vulnerability Description
Network-AI from 5.14.0 before 5.15.2 contains a security control bypass vulnerability in the ClaudeHookBridge PreToolUse hook, which matches deny patterns only against the first present candidate field. A prompt-injected agent can place dangerous payloads in fields like Write content or an MCP script parameter beside a benign file_path or command, evading denyPatterns to write web shells or execute scripts.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
解释冲突
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Jovancoding Network-AI 5.14.0 ~ 5.15.2 -

II. Public POCs for CVE-2026-109331

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-109331

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-109331 (1)

Other References for CVE-2026-109331 (1)

Same Patch Batch · Jovancoding · 2026-10-12 · 3 CVEs total

CVE-2026-109330 4.3 MEDIUM Network-AI 5.0.0 before 5.15.2 Cross-Site WebSocket Hijacking via DashboardServer
CVE-2026-109332 3.1 LOW Network-AI before 5.15.2 CORS Origin Validation Error in MCP SSE Transport

IV. Related Vulnerabilities

Same product: Network-AI
Same vendor: Jovancoding
Same weakness: CWE-436

V. Comments for CVE-2026-109331

No comments yet

Leave a comment