CVE-2026-54051

Name of the Vulnerable Software and Affected Versions Network-AI versions prior to 5.9.1

Description An issue exists in the agent sandbox where shell commands are gated behind an allowlist using the SandboxPolicy.isCommandAllowed function. The allowlist uses glob-matching on the entire command string, but the ShellExecutor executes these strings via /bin/sh -c. This discrepancy allows an attacker to bypass the restriction; for example, a wildcard entry like git * would also match git status; <command>, leading to arbitrary command execution as the orchestrator process. This effectively defeats the primary control intended to contain a compromised agent.

Recommendations Upgrade to network-ai version 5.9.1 or later. As a defense in depth measure, avoid using broad wildcard allowlist entries such as node * or npm * as these can allow direct code execution by design.