Tools AI Risk Radar ai-incident-0219
Incident record
Network-AI fixes unauthorised dashboard WebSocket access
- Severity
- Medium
- Status
- Patched
- Type
- Infra Vuln
- Target
- Network-AI before 5.15.2
- Actor
- researcher
- CVE
- CVE-2026-109330
What happened
Missing origin and authentication checks on a dashboard WebSocket can expose the agent topology to an unauthorised connection.
The maintainer’s 27 September advisory identifies 5.15.2 as fixed and rates the issue CVSS 3.1 4.3 Medium. The CVE record was published on 12 October.
Sources
- Original advisory or disclosuregithub.com/Jovancoding/Network-AI/security/advisories/GHSA-h…
- CVE recordcveawg.mitre.org/api/cve/CVE-2026-109330
One record from the AI Risk Radar, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 13 October 2026