CVE-2026-42856 Network-AI: Missing authentication on MCP HTTP endpoint allows unauthenticated privileged tool calls
Unauthenticated attackers can invoke privileged management tools via the MCP HTTP endpoint, leading to potential system compromise.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-42856?
CVE-2026-42856 is a high-severity missing authorization vulnerability in Jovancoding Network-AI, published on 11 May 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to 5.1.3, the MCP HTTP transport accepts JSON-RPC tools/call requests with no authentication, session, origin, or token check, and dispatches them directly to the orchestrator's tool registry. The default bind address is 0.0.0.0. As a result, any party with network reachability to the service can enumerate and invoke privileged management tools. This vulnerability is fixed in 5.1.3.
Weakness: CWE-306
Which versions are affected by CVE-2026-42856?
2 open source packages ship an affected version, including network-ai.
| Package | Affected | Fixed in |
|---|---|---|
network-ai npm | All versions | 5.1.3 |
network-ai npm | All versions | 5.1.3 |
How do I fix CVE-2026-42856?
Upgrade network-ai to 5.1.3 or later.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2026-42856 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-42856 exists.
Sources
Also known as GHSA-fj4g-2p96-q6m3.