Lucene search
+L

13 matches found

osv-cve
osv-cve
•added 2026/07/20 4:38 p.m.•17 views

CVE-2026-58482 Network-AI: ApprovalInbox HTTP server has no authentication — anyone can approve pending agent actions

Network-AI, a TypeScript/Node.js multi-agent orchestrator, has a shipped, exported, documented feature called ApprovalInbox lib/approval-inbox.ts. It is the network surface of the human-in-the-loop Approval Gate, which ApprovalGate uses to require explicit human approval for high-risk operations...

5.9CVSS5.7AI score
SaveExploits0References5
Rows per page
Query Builder