SCA: security update for network-ai (GHSA-qw6v-5fcf-5666)

critical Tenable Self-Hosted Container Security Plugin ID 443565

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

- Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.9.1, the agent sandbox
gates shell commands behind an allowlist (`SandboxPolicy.isCommandAllowed`), which THREAT_MODEL.md calls
the main control against a compromised agent (Adversary 3.2). The allowlist glob-matches the whole command
string, but `ShellExecutor` runs that string through `/bin/sh -c`. So any wildcard allow such as `git *`,
`npm *` or `node *` also matches `git status; <anything>`, and a scoped command becomes arbitrary
execution. The issue is fixed in v5.9.1. `ShellExecutor` now executes via `spawn(file, args, { shell:
false })` using a quote-aware parsed argv, so no shell is invoked. `SandboxPolicy.isCommandAllowed` and
the new `SandboxPolicy.tokenizeCommand` reject any unquoted shell metacharacter (`; & | $ ` ` ` ( ) < > {
}` newline) or unterminated quote before the allowlist glob match; quoted metacharacters are preserved as
literal argument data. Users should upgrade to `[email protected]` or later. As defense in depth, avoid
broad wildcard allowlist entries such as `node *` / `npm *` which are direct code execution by design.
(CVE-2026-54051)

Solution

Update the network-ai library and its related packages to version 5.9.1 or later.

Plugin Details

Severity: Critical

ID: 443565

Version: Revision 1.4

Type: Local

Family: SCA Checks

Published: 6/19/2026

Updated: 7/21/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Medium

Score: 5

Percentile: 94.23

Vendor

Vendor Severity: Critical

CVSS v2

Risk Factor: High

Base Score: 9

Temporal Score: 6.7

Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2026-54051

CVSS v3

Risk Factor: Critical

Base Score: 9.9

Temporal Score: 8.6

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 6/19/2026

Vulnerability Publication Date: 6/19/2026

Reference Information

CVE: CVE-2026-54051

cwe: CWE-78

Detections

Analytics