{"metadata": {"vulnerability": "CVE-2026-48814", "count": 16, "kinds": {"milestone": 4, "sighting": 4, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-05-22T20:57:10.976Z", "date_only": false, "value": "2026-05-22T20:57:10.976Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-48814", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-06-17T19:42:30.415Z", "date_only": false, "value": "2026-06-17T19:42:30.415Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-48814", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-06-17T19:42:30.415Z", "date_only": false, "value": "2026-06-17T19:42:30.415Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-48814", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T20:17:22Z", "date_only": false, "value": "2026-06-17T20:17:22Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-R78R-RWRF-RJWP", "record": "GHSA-R78R-RWRF-RJWP", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-06-17T20:17:22.260Z", "date_only": false, "value": "2026-06-17T20:17:22.260", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-48814", "record": "FKIE_CVE-2026-48814", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-06-17T20:30:15.025Z", "date_only": false, "value": "2026-06-17T20:30:15.025720Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3moj5qnuvcd2w", "record": "cve-2026-48814", "field": "creation_timestamp", "uuid": "2d08c674-0869-4d8c-b42a-29a8dd83a7bd", "content": "CRITICAL: Jovancoding Network-AI \u22645.7.1 lets unauthenticated callers invoke all MCP tools if default secret is empty. Upgrade to 5.7.2 now. https://radar.offseq.com/threat/cve-2026-48814-cwe-306-missing-authentication-for--a37c283f4afc7554 #OffSeq #CVE202648814 #AppSec", "url": "https://bsky.app/profile/offseq.bsky.social/post/3moj5qnuvcd2w"}, {"timestamp": "2026-06-17T22:38:26.114Z", "date_only": false, "value": "2026-06-17T22:38:26.114245Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mojevvheah2c", "record": "CVE-2026-48814", "field": "creation_timestamp", "uuid": "ef382c12-db62-4cd2-a9f8-0a5ceab2dc20", "content": "CVE-2026-48814 - Network-AI: Empty default secret still authorizes all requests (Incomplete fix for CVE-2026-46701)\nCVE ID : CVE-2026-48814\n \n Published : June 17, 2026, 7:42 p.m. | 2\u00a0hours ago\n \n Description : Network-AI is a TypeScript/Node.js multi-agent orchestrator. In ve...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mojevvheah2c"}, {"timestamp": "2026-06-18T19:42:39.963Z", "date_only": false, "value": "2026-06-18T19:42:39.963767Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-48814", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-06-18T19:42:39.963Z", "date_only": false, "value": "2026-06-18T19:42:39.963767Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-48814", "record": "FKIE_CVE-2026-48814", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-06-18T19:43:01.315Z", "date_only": false, "value": "2026-06-18T19:43:01.315Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-48814", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-06-18T19:43:01.315Z", "date_only": false, "value": "2026-06-18T19:43:01.315Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-48814", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-19T13:34:24Z", "date_only": false, "value": "2026-06-19T13:34:24Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-R78R-RWRF-RJWP", "record": "GHSA-R78R-RWRF-RJWP", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-06-19T13:34:24Z", "date_only": false, "value": "2026-06-19T13:34:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/advisories/GHSA-r78r-rwrf-rjwp", "record": "CVE-2026-48814", "field": "creation_timestamp", "uuid": "f8582823-fb68-47c6-b888-6902ce1090ac", "url": "https://github.com/advisories/GHSA-r78r-rwrf-rjwp", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-19T13:34:24Z", "date_only": false, "value": "2026-06-19T13:34:24Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-R78R-RWRF-RJWP", "record": "GHSA-R78R-RWRF-RJWP", "field": "modified", "linked_record": true}, {"timestamp": "2026-06-19T14:11:51Z", "date_only": false, "value": "2026-06-19T14:11:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/alon710/95012eaaac31573d3f20cff3cfbc3e84", "record": "CVE-2026-48814", "field": "creation_timestamp", "uuid": "5405f18e-74af-4cbc-9a41-3175d0974776", "content": "# CVE-2026-48814: CVE-2026-48814: Missing Authentication for Critical Orchestration Tools in Network-AI McpSseServer\n\n> **CVSS Score:** 9.1\n> **Published:** 2026-06-19\n> **Full Report:** https://cvereports.com/reports/CVE-2026-48814\n\n## Summary\nCVE-2026-48814 is a critical vulnerability classified as Missing Authentication for Critical Function (CWE-306) in Network-AI, a TypeScript/Node.js multi-agent orchestrator. In versions 5.7.1 and earlier, the Model Context Protocol (MCP) Server-Sent Events (SSE) server allows unauthenticated, cross-origin invocation of sensitive orchestration tools. This vulnerability stems from an incomplete fix for CVE-2026-46701, where library-level server class initializations still default to an insecure empty-secret configuration, allowing remote attackers or Server-Side Request Forgery (SSRF) agents to execute administrative tools.\n\n## TL;DR\nThe Network-AI library (versions <= 5.7.1) features an insecure default configuration in its MCP Server-Sent Events server component. If initialized without a secret, it permits unauthenticated remote callers to invoke any of its 22 critical orchestration tools, potentially leading to unauthorized data exposure, state mutation, and arbitrary agent spawning.\n\n## Technical Details\n\n- **CWE ID**: CWE-306 (Missing Authentication for Critical Function)\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 9.1 (Critical)\n- **EPSS Score**: 0.00297 (~0.30% probability)\n- **Impact**: High Confidentiality, High Integrity, No Availability\n- **Exploit Status**: None (No public weaponized exploit available)\n- **KEV Status**: Not listed in CISA KEV Catalog\n\n## Affected Systems\n\n- Network-AI library environments implementing custom McpSseServer integrations\n- Node.js multi-agent orchestration backends running network-ai versions <= 5.7.1\n- **network-ai**: <= 5.7.1 (Fixed in: `5.7.2`)\n\n## Mitigation\n\n- Upgrade the network-ai dependency to version 5.7.2 or later.\n- Instantiate the McpSseServer class with a non-empty, cryptographically secure secret.\n- Restrict binding configurations to loopback addresses (127.0.0.1, localhost) instead of binding to 0.0.0.0.\n- Utilize local standard input/output (McpStdioTransport) transport channels where network binding is not strictly required.\n\n**Remediation Steps:**\n1. Run 'npm install network-ai@5.7.2' to update the library to the patched version.\n2. Audit custom integration files importing 'McpSseServer' from 'network-ai' and ensure a strong secret is passed during initialization.\n3. Ensure the server initialization code does not fail open when environment variables are missing.\n\n## References\n\n- [GitHub Security Advisory Record](https://github.com/Jovancoding/Network-AI/security/advisories/GHSA-r78r-rwrf-rjwp)\n- [GitHub Release Log v5.7.2](https://github.com/Jovancoding/Network-AI/releases/tag/v5.7.2)\n- [GitHub Advisory Database Mapping](https://github.com/advisories/GHSA-j3vx-cx2r-pvg8)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-48814) - Automated Vulnerability Intelligence*", "url": "https://gist.github.com/alon710/95012eaaac31573d3f20cff3cfbc3e84"}, {"timestamp": "2026-10-25T23:10:00.167Z", "date_only": false, "value": "2026-10-25T23:10:00.167", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-48814", "record": "FKIE_CVE-2026-48814", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-03T13:23:06.359Z", "anchors": {"origin": {"timestamp": "2026-06-17T19:42:30.415Z", "date_only": false, "value": "2026-06-17T19:42:30.415Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-48814", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-06-17T19:42:30.415Z", "date_only": false, "value": "2026-06-17T19:42:30.415Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-48814", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-06-19T13:34:24Z", "date_only": false, "value": "2026-06-19T13:34:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/advisories/GHSA-r78r-rwrf-rjwp", "record": "CVE-2026-48814", "field": "creation_timestamp", "uuid": "f8582823-fb68-47c6-b888-6902ce1090ac", "url": "https://github.com/advisories/GHSA-r78r-rwrf-rjwp", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 150713.585, "hours": 41.86488472222222, "days": 1.744370196759259, "min_seconds": 150713.585, "max_seconds": 150713.585, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-06-17T19:42:30.415Z", "date_only": false, "value": "2026-06-17T19:42:30.415Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-48814", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-06-19T13:34:24Z", "date_only": false, "value": "2026-06-19T13:34:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/advisories/GHSA-r78r-rwrf-rjwp", "record": "CVE-2026-48814", "field": "creation_timestamp", "uuid": "f8582823-fb68-47c6-b888-6902ce1090ac", "url": "https://github.com/advisories/GHSA-r78r-rwrf-rjwp", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 11986835.944488, "hours": 3329.6766512466666, "days": 138.73652713527778, "min_seconds": 11986835.944488, "max_seconds": 11986835.944488, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-06-17T19:42:30.415Z", "date_only": false, "value": "2026-06-17T19:42:30.415Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-48814", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-03T13:23:06.359Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 11836122.359488, "hours": 3287.811766524444, "days": 136.99215693851852, "min_seconds": 11836122.359488, "max_seconds": 11836122.359488, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-06-19T13:34:24Z", "date_only": false, "value": "2026-06-19T13:34:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/advisories/GHSA-r78r-rwrf-rjwp", "record": "CVE-2026-48814", "field": "creation_timestamp", "uuid": "f8582823-fb68-47c6-b888-6902ce1090ac", "url": "https://github.com/advisories/GHSA-r78r-rwrf-rjwp", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-03T13:23:06.359Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}