CVE-2026-64623— Network-AI before 5.13.4 Cryptographic Signature Verification Bypass
Quick assessment
Affected
Jovancoding Network-AI
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Jovan Marinovic Network-AI是Jovan Marinovic个人开发者的一个 TypeScript/Node.js 多智能体编排器，可为任何 AI 智能体堆栈添加协调、防护和治理功能。 Jovan Marinovic Network-AI 5.13.4之前版本存在加密问题漏洞，该漏洞源于APSAdapter中存在不正确的加密签名验证，默认本地验证器将任何非空字符串视为有效，可能导致未经身份验证的攻击者提交伪造的APS委托有效载荷，绕过签名验证并获取敏感资源的签名权限授予令牌。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 2
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Jovancoding | Network-AI | < 5.13.4 |
affected |
5.13.4 |
unaffected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-64623
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Network-AI before 5.13.4 Cryptographic Signature Verification Bypass
Source: CVE Program / CVE List V5
Vulnerability Description
Network-AI before 5.13.4 contains an improper cryptographic signature verification vulnerability in APSAdapter where the default local verifier accepts any non-empty string as valid. Unauthenticated attackers can submit forged APS delegation payloads with arbitrary scopes to bypass signature verification and obtain signed permission-grant tokens for sensitive resources including SHELL_EXEC.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
密码学签名的验证不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
Jovan Marinovic Network-AI 加密问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Jovan Marinovic Network-AI是Jovan Marinovic个人开发者的一个 TypeScript/Node.js 多智能体编排器，可为任何 AI 智能体堆栈添加协调、防护和治理功能。 Jovan Marinovic Network-AI 5.13.4之前版本存在加密问题漏洞，该漏洞源于APSAdapter中存在不正确的加密签名验证，默认本地验证器将任何非空字符串视为有效，可能导致未经身份验证的攻击者提交伪造的APS委托有效载荷，绕过签名验证并获取敏感资源的签名权限授予令牌。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Jovancoding | Network-AI | 0 ~ 5.13.4 | - |
|
II. Public POCs for CVE-2026-64623
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
Qwen3.6-35B-A3B
· 13091 chars
Pro+ exclusive includes:
Vulnerability reproduction recording (real sandbox build + trigger, exclusive)
In-depth vulnerability mechanism
Trigger conditions & impact
Full executable POC code
Exploit chain & mitigation
POC zip download
100+ AI POC generations per month
III. Intelligence Information for CVE-2026-64623
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-64623 (2)
Same Patch Batch · Jovancoding · 2026-07-20 · 9 CVEs total
| CVE-2026-54051 | 9.9 CRITICAL | Network-AI has an an OS Command Injection issue |
| CVE-2026-46701 | 7.6 HIGH | Network-AI: Unauthenticated Cross-Origin MCP Tool Invocation via Empty Default Secret |
| CVE-2026-64622 | 7.5 HIGH | Network-AI 5.12.2 through 5.13.3 Missing Authorization via ApprovalInbox |
| CVE-2026-58484 | 7.1 HIGH | Network-AI: Poisoned environment backup manifest allows arbitrary recursive deletion durin |
| CVE-2026-58481 | 6.5 MEDIUM | Network-AI: AgentRuntime sandbox path-prefix checks allow file access outside the configur |
| CVE-2026-58413 | 6.1 MEDIUM | EnvironmentManager.restore() backup ID path traversal copies arbitrary directories into en |
| CVE-2026-58482 | 5.9 MEDIUM | Network-AI: ApprovalInbox HTTP server has no authentication — anyone can approve pending a |
| CVE-2026-58414 | 5.5 MEDIUM | Network-AI: EnvironmentManager.backup() follows symlinked directories and copies files out |
IV. Related Vulnerabilities
Same product: Network-AI
-
CVE-2026-109331
Network-AI 5.14.0 before 5.15.2 Deny Pattern Bypass via Clau -
CVE-2026-109332
Network-AI before 5.15.2 CORS Origin Validation Error in MCP -
CVE-2026-109330
Network-AI 5.0.0 before 5.15.2 Cross-Site WebSocket Hijackin -
CVE-2026-73615
Network-AI SandboxPolicy before 5.15.1 Blocklist Bypass via -
CVE-2026-73614
Network-AI ClaudeHookBridge Deny Pattern Bypass via Truncati
Same vendor: Jovancoding
-
CVE-2026-109331
Network-AI 5.14.0 before 5.15.2 Deny Pattern Bypass via Clau -
CVE-2026-109332
Network-AI before 5.15.2 CORS Origin Validation Error in MCP -
CVE-2026-109330
Network-AI 5.0.0 before 5.15.2 Cross-Site WebSocket Hijackin -
CVE-2026-73615
Network-AI SandboxPolicy before 5.15.1 Blocklist Bypass via -
CVE-2026-73614
Network-AI ClaudeHookBridge Deny Pattern Bypass via Truncati
Same weakness: CWE-347
-
CVE-2026-103297
CAI Content Credentials | Improper Verification of Cryptogra -
CVE-2026-103296
CAI Content Credentials | Improper Verification of Cryptogra -
CVE-2026-95633
CAI Content Credentials | Improper Verification of Cryptogra -
CVE-2026-102502
CAI Content Credentials | Improper Verification of Cryptogra -
CVE-2026-95632
CAI Content Credentials | Improper Verification of Cryptogra
V. Comments for CVE-2026-64623
No comments yet