CVE-2026-109330: Network-AI 5.0.0 before 5.15.2 Cross-Site WebSocket Hijacking via DashboardServer

Q: Who is exposed to this issue?

Users running the Network-AI dashboard are exposed if they use versions from 5.0.0 before 5.15.2 and can be lured into visiting a malicious web page. The malicious page targets the dashboard through a WebSocket connection to the victim's loopback interface.

Q: What does an attacker need to exploit it?

The attacker does not need credentials or prior access, but must persuade a victim with the dashboard running to open a malicious page. That page can open a WebSocket to the local dashboard because DashboardServer does not validate the Origin or a token during upgrade.

Q: What information can be exposed?

An attacker can read live agent topology data, including agent IDs, roles, task descriptions, and token budgets. The provided impact information describes confidentiality exposure only, not modification or service disruption.

Published Oct 12, 2026

Updated

Network-AI 5.0.0 before 5.15.2 contains a cross-site WebSocket hijacking vulnerability in DashboardServer that allows remote attackers to read live agent topology because handleUpgrade performs no Origin or token validation. Attackers can lure a victim running the dashboard to a malicious page that opens a WebSocket to the loopback dashboard and exfiltrates agent IDs, roles, task descriptions, and token budgets.

Affected Software

1 affected component

Network-AI Network-AI>=5.0.0<5.15.2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Network-AI to a version that resolves this vulnerability.
Fixed in 5.15.2

Event History

Oct 12, 2026

CVE Published

via MITRE·04:05 PM

Data Sourced

via MITRE·04:05 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who is exposed to this issue?

Users running the Network-AI dashboard are exposed if they use versions from 5.0.0 before 5.15.2 and can be lured into visiting a malicious web page. The malicious page targets the dashboard through a WebSocket connection to the victim's loopback interface.

What does an attacker need to exploit it?

The attacker does not need credentials or prior access, but must persuade a victim with the dashboard running to open a malicious page. That page can open a WebSocket to the local dashboard because DashboardServer does not validate the Origin or a token during upgrade.

What information can be exposed?

An attacker can read live agent topology data, including agent IDs, roles, task descriptions, and token budgets. The provided impact information describes confidentiality exposure only, not modification or service disruption.

CVE-2026-109330: Network-AI 5.0.0 before 5.15.2 Cross-Site WebSocket Hijacking via DashboardServer

Affected Software

Remediation

Event History

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

What information can be exposed?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

What information can be exposed?