Skip to content
Threat Feed
Subscribe

Product

Network-AI < 5.13.4

1 brief RSS
high advisory

CVE-2026-64623: Jovancoding Network-AI Signature Verification Bypass Leading to Remote Code Execution

Jovancoding Network-AI versions before 5.13.4 are vulnerable to an improper cryptographic signature verification flaw (CVE-2026-64623) in the APSAdapter component, allowing unauthenticated attackers to bypass signature validation by submitting forged APS delegation payloads with arbitrary scopes to obtain signed permission tokens for sensitive resources, including SHELL_EXEC capabilities.

Network-AI < 5.13.4 vulnerability rce signature-bypass network-ai
4t 1c