CVE-2026-73615

Network-AI versions before 5.15.1 contain a security matcher bypass vulnerability where SandboxPolicy evaluates raw command strings with quotes preserved while the executor tokenizes commands by stripping quotes before execution. Attackers can craft quoted commands that evade blocklist checks and...

PT-2026-71443

Name of the Vulnerable Software and Affected Versions Network-AI versions prior to 5.15.1 Description A security matcher bypass exists because SandboxPolicy evaluates raw command strings with quotes preserved, whereas the executor tokenizes commands by stripping quotes before execution. This...

CVE-2026-73615: Interpretation Conflict

Network-AI versions before 5.15.1 contain a security matcher bypass vulnerability where SandboxPolicy evaluates raw command strings with quotes preserved while the executor tokenizes commands by stripping quotes before execution. Attackers can craft quoted commands that evade blocklist checks and...