What happened
Network-AI's DashboardServer accepts WebSocket upgrades with no Origin or token validation, enabling cross-site WebSocket hijacking. A page the victim visits can connect to the loopback dashboard socket and exfiltrate live agent topology data — agent IDs, roles, task descriptions, and token budgets.
Why it matters
Agent-orchestration telemetry is sensitive design information: it maps out the victim's deployed AI agent workforce, roles and budgets, which an attacker can use to target the most privileged agent or impersonate agent identities in follow-on social engineering.
Attack vector
handleUpgrade performs no Origin or token validation. An attacker lures a dashboard-running victim to a malicious page that opens a WebSocket to the loopback dashboard and reads live agent topology (IDs, roles, task descriptions, token budgets).
Affected systems
Network-AI (Jovancoding) 5.0.0 <= version < 5.15.2 (DashboardServer handleUpgrade)
Mitigation
Upgrade to Network-AI 5.15.2 (GHSA-hr6v-mfxm-4438).