CVE-2026-109332 | Jovancoding Network-AI up to 5.15.1 lib/mcp-transport-sse.ts McpSseServer._handleRequest cross-domain policy

October 12, 2026 Yanac

A vulnerability, which was classified as problematic, was found in Jovancoding Network-AI up to 5.15.1. This issue affects the function McpSseServer._handleRequest of the file lib/mcp-transport-sse.ts. Such manipulation leads to permissive cross-domain policy with untrusted domains.

This vulnerability is documented as CVE-2026-109332. The attack can be executed remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More