Jovancoding Network-AI up to 5.12.1 EnvironmentManager EnvironmentManager.pruneBackups entry.path path traversal

Summaryinfo

A vulnerability was found in Jovancoding Network-AI up to 5.12.1 and classified as problematic. This issue affects the function EnvironmentManager.pruneBackups of the component EnvironmentManager. Executing a manipulation of the argument entry.path can lead to path traversal. This vulnerability is tracked as CVE-2026-58484. The attack can be launched remotely. No exploit exists.

Detailsinfo

A vulnerability classified as problematic was found in Jovancoding Network-AI up to 5.12.1. This vulnerability affects the function EnvironmentManager.pruneBackups of the component EnvironmentManager. The manipulation of the argument entry.path with an unknown input leads to a path traversal vulnerability. The CWE definition for the vulnerability is CWE-22. The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory. As an impact it is known to affect integrity, and availability. CVE summarizes:

Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `EnvironmentManager.listBackups()` reads each backup's `_manifest.json` and trusts the manifest's `path` field. `EnvironmentManager.pruneBackups()` later passes that trusted `entry.path` directly to `rmSync(entry.path, { recursive: true, force: true })`. An attacker who can place or modify a manifest inside `data/<env>/.backups/<name>/_manifest.json` can cause `network-ai env backup prune --env <env> --keep <n>` or any code path invoking `pruneBackups()` to recursively delete an arbitrary path accessible to the Network-AI process user. This is fixed in v5.12.2. `pruneBackups()` no longer passes `entry.path` from the on-disk manifest to `rmSync`. The deletion path is recomputed from a format-validated `entry.backupId`, and a `dirname` containment check confines deletion to exactly one level under the backups directory. A poisoned manifest (e.g. `"path": "/"`) is now inert.

The advisory is shared for download at github.com. This vulnerability was named CVE-2026-58484 since 06/30/2026. The exploitation appears to be easy. The attack can be initiated remotely. There are known technical details, but no exploit is available. The MITRE ATT&CK project declares the attack technique as T1006.

Upgrading to version 5.12.2 eliminates this vulnerability.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Artificial Intelligence Software

Vendor

• Jovancoding

Name

• Network-AI

Version

• 5.12.0
• 5.12.1

Website

• Product: https://github.com/Jovancoding/Network-AI/

CPE 2.3info

• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion