CVE-2026-73615 | BDVDB-2026-359127 Detail

Description#

Network-AI versions before 5.15.1 contain a security matcher bypass vulnerability where SandboxPolicy evaluates raw command strings with quotes preserved while the executor tokenizes commands by stripping quotes before execution. Attackers can craft quoted commands that evade blocklist checks and approval gates while the executor runs the identical unquoted dangerous argv.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-08-13Record published in the CVE List.
2. Version 22026-08-15Most recent update recorded in the CVE List.