CVE-2026-54051

Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.9.1, the agent sandbox gates shell commands behind an allowlist "SandboxPolicy.isCommandAllowed", which THREATMODEL.md calls the main control against a compromised agent Adversary 3.2. The allowlist glob-matches the...

CVE-2026-54051: Improper Neutralization of Special Elements used in an OS Command

Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.9.1, the agent sandbox gates shell commands behind an allowlist SandboxPolicy.isCommandAllowed, which THREATMODEL.md calls the main control against a compromised agent Adversary 3.2. The allowlist glob-matches the who...