{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/network-ai-5.14.0---5.15.1/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:network-ai:network-ai:5.14.0:*:*:*:*:*:*:*","cpe:2.3:a:network-ai:network-ai:5.15.1:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.4,"id":"CVE-2026-109331"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Network-AI (5.14.0 - 5.15.1)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Network-AI"],"content_html":"\u003cp\u003eNetwork-AI versions 5.14.0 through 5.15.1 are vulnerable to a security control bypass flaw identified as CVE-2026-109331 within the ClaudeHookBridge PreToolUse hook. The vulnerability stems from improper input validation logic where the hook only evaluates the first candidate field of a request against established deny patterns. An attacker can leverage this limitation by using prompt injection to craft malicious inputs that hide dangerous payloads, such as web shell content or unauthorized script parameters, in secondary fields while keeping the primary field benign. Successful exploitation of this vulnerability allows an attacker to bypass security filters, leading to arbitrary script execution or unauthorized file modifications on the appliance. Defenders should prioritize patching affected instances to version 5.15.2 or later to address the validation logic flaw.\u003c/p\u003e\n\u003ch2 id=\"attack-chain\"\u003eAttack Chain\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eAttacker identifies a target running Network-AI (v5.14.0 - 5.15.1).\u003c/li\u003e\n\u003cli\u003eAttacker crafts a prompt injection sequence designed to interact with the ClaudeHookBridge.\u003c/li\u003e\n\u003cli\u003eAttacker constructs a multi-field request where the first field satisfies benign deny-pattern checks.\u003c/li\u003e\n\u003cli\u003eAttacker inserts malicious payload (e.g., shell script or web shell code) into a secondary field like \u0026quot;Write content\u0026quot; or an MCP script parameter.\u003c/li\u003e\n\u003cli\u003eThe ClaudeHookBridge PreToolUse hook parses the request and validates only the primary field.\u003c/li\u003e\n\u003cli\u003eThe validation logic ignores the secondary field due to the flawed implementation, allowing the malicious request to pass.\u003c/li\u003e\n\u003cli\u003eThe system processes the request, executing the script or writing the malicious file to the filesystem.\u003c/li\u003e\n\u003cli\u003eAttacker gains unauthorized persistence or execution on the network appliance.\u003c/li\u003e\n\u003c/ol\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe vulnerability poses a high risk to organizations utilizing Network-AI, as it allows attackers to bypass core security controls meant to limit agent capabilities. If exploited, an attacker could achieve unauthorized code execution, deploy web shells for persistent access, or modify critical system files. This vulnerability affects all environments running the vulnerable software versions, potentially impacting a wide range of deployments that rely on these security hooks for input sanitization.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade Network-AI to version 5.15.2 or later immediately to resolve the validation logic flaw in the ClaudeHookBridge PreToolUse hook.\u003c/li\u003e\n\u003cli\u003eAudit logs for anomalous activity involving the ClaudeHookBridge component, focusing on requests where multiple input fields or parameters are present in a single interaction.\u003c/li\u003e\n\u003cli\u003eRestrict the deployment of AI agents in production environments to those with validated, secure integration configurations until patching is completed.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-12T20:29:54Z","date_published":"2026-10-12T20:29:54Z","id":"https://feed.craftedsignal.io/briefs/2026-10-network-ai-bypass/","summary":"Network-AI versions 5.14.0 through 5.15.1 contain a security control bypass in the ClaudeHookBridge PreToolUse hook, enabling prompt-injected agents to execute arbitrary scripts or deploy web shells.","title":"Security Control Bypass in Network-AI ClaudeHookBridge","url":"https://feed.craftedsignal.io/briefs/2026-10-network-ai-bypass/"}],"language":"en","title":"CraftedSignal Threat Feed - Network-AI (5.14.0 - 5.15.1)","version":"https://jsonfeed.org/version/1.1"}