PT-2026-42703

Name of the Vulnerable Software and Affected Versions Network-AI versions prior to 5.4.5 Description The MCP SSE server defaults to an empty secret via the NETWORK AI MCP SECRET environment variable, which causes the isAuthorized function to return true for all requests regardless of whether an...