CVE-2026-109332: Network-AI before 5.15.2 CORS Origin Validation Error in MCP SSE Transport

Q: Which deployments are exposed?

The issue affects Network-AI versions before 5.15.2 when the MCP SSE server is bound to a non-loopback address. The described cross-origin read applies to unauthenticated endpoints such as /health.

Q: What must an attacker do to exploit this?

A victim must visit an attacker-controlled page whose Origin is localhost. The vulnerable server must be reachable through its non-loopback binding, allowing the page to read an affected unauthenticated endpoint cross-origin.

Q: Are loopback-only deployments affected in the same way?

The described condition is specifically that the server binds a non-loopback address. The provided information does not describe the same exposure for a server bound only to a loopback interface.

Published Oct 12, 2026

Updated

Network-AI (npm network-ai) before 5.15.2 contains an origin validation error in McpSseServer.handleRequest in lib/mcp-transport-sse.ts that reflects localhost Origins into Access-Control-Allow-Origin regardless of bind interface. When the server binds a non-loopback address, an attacker page with a localhost Origin visited by a victim can read unauthenticated endpoints like /health cross-origin.

Affected Software

1 affected component

npm/network-ai<5.15.2

Event History

Oct 12, 2026

CVE Published

via MITRE·04:05 PM

Data Sourced

via MITRE·04:05 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are exposed?

The issue affects Network-AI versions before 5.15.2 when the MCP SSE server is bound to a non-loopback address. The described cross-origin read applies to unauthenticated endpoints such as /health.

What must an attacker do to exploit this?

A victim must visit an attacker-controlled page whose Origin is localhost. The vulnerable server must be reachable through its non-loopback binding, allowing the page to read an affected unauthenticated endpoint cross-origin.

Are loopback-only deployments affected in the same way?

The described condition is specifically that the server binds a non-loopback address. The provided information does not describe the same exposure for a server bound only to a loopback interface.

CVE-2026-109332: Network-AI before 5.15.2 CORS Origin Validation Error in MCP SSE Transport

Affected Software

Event History

Frequently Asked Questions

Which deployments are exposed?

What must an attacker do to exploit this?

Are loopback-only deployments affected in the same way?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are exposed?

What must an attacker do to exploit this?

Are loopback-only deployments affected in the same way?