Network-AI Security Control Bypass via PreToolUse Hook

Executive Summary

Network-AI versions 5.14.0 to 5.15.2 have a security flaw in the ClaudeHookBridge PreToolUse hook. The vulnerability allows bypassing deny patterns by placing dangerous payloads in secondary fields like Write content or MCP script parameters while keeping a benign field like file_path or command. This lets attackers evade restrictions and potentially execute malicious scripts or write web shells.

Useful 0 Not Useful 0

Impact Analysis

If exploited, this vulnerability could allow an attacker to execute arbitrary code or write malicious files on your system. This might lead to unauthorized access, data theft, or further compromise of your network. Systems using vulnerable versions of Network-AI are at risk of prompt injection attacks.

Useful 0 Not Useful 0

Mitigation Strategies

Update Network-AI to version 5.15.2 or later to address the security control bypass vulnerability in the ClaudeHookBridge PreToolUse hook.

Useful 0 Not Useful 0