{"cve":"CVE-2026-54051","nvd":{"published":"2026-07-20T17:17:57.643","modified":"2026-10-24T20:10:00.137","status":"Deferred","description":"Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.9.1, the agent sandbox gates shell commands behind an allowlist (`SandboxPolicy.isCommandAllowed`), which THREAT_MODEL.md calls the main control against a compromised agent (Adversary 3.2). The allowlist glob-matches the whole command string, but `ShellExecutor` runs that string through `/bin/sh -c`. So any wildcard allow such as `git *`, `npm *` or `node *` also matches `git status; <anything>`, and a scoped command becomes arbitrary execution. The issue is fixed in v5.9.1. `ShellExecutor` now executes via `spawn(file, args, { shell: false })` using a quote-aware parsed argv, so no shell is invoked. `SandboxPolicy.isCommandAllowed` and the new `SandboxPolicy.tokenizeCommand` reject any unquoted shell metacharacter (`; & | $ ` ` ` ( ) < > { }` newline) or unterminated quote before the allowlist glob match; quoted metacharacters are preserved as literal argument data. Users should upgrade to `network-ai@5.9.1` or later. As defense in depth, avoid broad wildcard allowlist entries such as `node *` / `npm *` which are direct code execution by design.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","score":9.9},"cwes":["CWE-78"],"references":["https://github.com/Jovancoding/Network-AI/commit/379f77656b578144e03415c5b134d8309a4b5792","https://github.com/Jovancoding/Network-AI/security/advisories/GHSA-qw6v-5fcf-5666","https://github.com/Jovancoding/Network-AI/security/advisories/GHSA-qw6v-5fcf-5666"],"products":[],"source":"nvd","synced_at":"2026-10-25T17:50:08.599881581+00:00"},"epss":{"cve":"CVE-2026-54051","score":0.00468,"percentile":0.40244,"date":"2026-10-25"},"kev":null,"osv":[{"id":"GHSA-qw6v-5fcf-5666","url":"https://osv.dev/vulnerability/GHSA-qw6v-5fcf-5666","summary":"Network-AI: Improper Neutralization of Special Elements used in an OS Command ","modified":"2026-06-19T13:56:29.308679Z","packages":[{"ecosystem":"npm","name":"network-ai","purl":"pkg:npm/network-ai","ranges":["<5.9.1"],"fixed":["5.9.1"]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}