Jovancoding Network-AI up to 5.12.1 EnvironmentManager EnvironmentManager.restore backupId path traversal

Summaryinfo

A vulnerability was found in Jovancoding Network-AI up to 5.12.1 and classified as critical. This impacts the function EnvironmentManager.restore of the component EnvironmentManager. The manipulation of the argument backupId results in path traversal. This vulnerability is cataloged as CVE-2026-58413. The attack may be launched remotely. There is no exploit available.

Detailsinfo

A vulnerability classified as critical has been found in Jovancoding Network-AI up to 5.12.1. Affected is the function EnvironmentManager.restore of the component EnvironmentManager. The manipulation of the argument backupId with an unknown input leads to a path traversal vulnerability. CWE is classifying the issue as CWE-23. The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `EnvironmentManager.restore(env, backupId)` computes the backup path with `join(envDir, '.backups', backupId)` and only checks that this path exists. It does not resolve the result or verify that it remains under `data/<env>/.backups`. A caller can pass a traversal backup ID such as `../../../outside/source-dir` to restore files from an arbitrary directory into the target environment data directory. The issue is fixed in v5.12.2. `restore()` now validates `backupId` against `/^[\w\-]+$/` and asserts `dirname(resolve(join(backupsDir, backupId))) === resolve(backupsDir)` before touching the filesystem. Backup IDs containing path separators or `..` are rejected, so a crafted ID can no longer copy directories from outside `.backups/` into the environment.

The advisory is shared for download at github.com. This vulnerability is traded as CVE-2026-58413 since 06/30/2026. The exploitability is told to be easy. It is possible to launch the attack remotely. There are known technical details, but no exploit is available. The MITRE ATT&CK project declares the attack technique as T1006.

Upgrading to version 5.12.2 eliminates this vulnerability.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• Artificial Intelligence Software

Vendor

• Jovancoding

Name

• Network-AI

Version

• 5.12.0
• 5.12.1

Website

• Product: https://github.com/Jovancoding/Network-AI/

CPE 2.3info

• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion