CVE-2026-109331

Name of the Vulnerable Software and Affected Versions Network-AI versions 5.14.0 through 5.15.1

Description A security control bypass exists in the ClaudeHookBridge PreToolUse hook. The issue occurs because deny patterns are matched only against the first available candidate field. This allows a prompt-injected agent to bypass denyPatterns by placing malicious payloads in fields such as Write content or an MCP script parameter alongside a benign file path or command, potentially leading to the creation of web shells or script execution.

Recommendations Update Network-AI to version 5.15.2 or later.