Which versions of Network-AI are affected by CVE-2026-64623?

Network-AI versions before 5.13.4 contain a flaw allowing unauthenticated attackers to execute arbitrary commands with system privileges.. A patch is available.

How to fix or mitigate CVE-2026-64623?

Within 24 hours: Immediately inventory all Network-AI deployments and their versions; determine network exposure and restrict access to authorized networks only using firewall rules or network segmentation. Within 7 days: Analyze Network-AI logs and network monitoring for exploitation attempts; contact the vendor to confirm patch availability and timeline. Within 30 days: Deploy Network-AI 5.13.4 or later once released by the vendor; if unavailable, escalate for decision on service replacement or indefinite network isolation.

Network-AI CVE-2026-64623

Q: What is the CVSS score of CVE-2026-64623?

CVE-2026-64623 has a CVSS 4.0 base score of 8.8 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.2%.

EUVD-2026-45938 HIGH

Improper Verification of Cryptographic Signature (CWE-347)

2026-07-20 disclosure@vulncheck.com

GHSA-37v5-gpcx-w9fc

Information Disclosure Jwt Attack

8.8

CVSS 4.0 · Vendor: vulncheck

Severity by source

Vendor (vulncheck) PRIMARY

8.8 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

8.6 HIGH

Unauthenticated network attack with trivial signature bypass gives AV:N/AC:L/PR:N/UI:N; forged privileged grants primarily undermine integrity (I:H) with limited confidentiality/availability impact.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N

Primary rating from Vendor (vulncheck).

CVSS VectorVendor: vulncheck

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Patch available

Jul 20, 2026 - 15:33 EUVD

Analysis Generated

Jul 20, 2026 - 12:41 vuln.today

CVE Published

Jul 20, 2026 - 12:19 cve.org

HIGH 8.8

DescriptionCVE.org

Network-AI before 5.13.4 contains an improper cryptographic signature verification vulnerability in APSAdapter where the default local verifier accepts any non-empty string as valid. Unauthenticated attackers can submit forged APS delegation payloads with arbitrary scopes to bypass signature verification and obtain signed permission-grant tokens for sensitive resources including SHELL_EXEC.

AnalysisAI

Signature-verification bypass in Network-AI before 5.13.4 lets unauthenticated remote attackers forge APS delegation payloads and mint signed permission-grant tokens for privileged scopes, including SHELL_EXEC. The root cause is a default local verifier in APSAdapter that treats any non-empty string as a valid cryptographic signature, so no real key material or authentication is needed. No public exploit identified at time of analysis, and the flaw is not listed in CISA KEV, but the trivial exploitation logic and network reachability make it a high-priority fix.

Technical ContextAI

Network-AI's APSAdapter is responsible for validating cryptographically signed APS (a permission/delegation subsystem) payloads before issuing permission-grant tokens. This maps to CWE-347 (Improper Verification of Cryptographic Signature): rather than validating a signature against a trusted public key, the shipped default 'local verifier' short-circuits and accepts any non-empty string, effectively disabling signature checking. The VulnCheck tags 'Jwt Attack' and 'Information Disclosure' indicate the delegation tokens are JWT-style bearer tokens whose integrity depends entirely on this signature step; when it is a no-op, an attacker fully controls the claims, including the requested scope set (e.g. SHELL_EXEC). No CPE strings were provided in the source data, so exact platform/build identifiers cannot be enumerated beyond the vendor version string.

RemediationAI

Vendor-released patch: upgrade Network-AI to 5.13.4 or later, which corrects the APSAdapter signature verification behavior; this is the primary and recommended fix per GitHub Security Advisory GHSA-3jf7-33vc-hgf4 (https://github.com/Jovancoding/Network-AI/security/advisories/GHSA-3jf7-33vc-hgf4) and the VulnCheck advisory (https://www.vulncheck.com/advisories/network-ai-before-cryptographic-signature-verification-bypass). If immediate upgrade is not possible, replace or reconfigure the default local verifier so it validates signatures against a real trusted public key instead of accepting any non-empty string, and if a strict verifier cannot be enabled, restrict network exposure of the APS/delegation endpoint to trusted hosts and block untrusted access to it - with the trade-off that legitimate remote delegation clients will also lose access until the fix is applied. Given the potential SHELL_EXEC scope, also revoke and rotate any permission-grant tokens issued while the vulnerable verifier was active, since previously minted forged tokens may remain valid.