CVE-2026-58413 Details
Description
Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `EnvironmentManager.restore(env, backupId)` computes the backup path with `join(envDir, '.backups', backupId)` and only checks that this path exists. It does not resolve the result or verify that it remains under `data/<env>/.backups`. A caller can pass a traversal backup ID such as `../../../outside/source-dir` to restore files from an arbitrary directory into the target environment data directory. The issue is fixed in v5.12.2. `restore()` now validates `backupId` against `/^[\w\-]+$/` and asserts `dirname(resolve(join(backupsDir, backupId))) === resolve(backupsDir)` before touching the filesystem. Backup IDs containing path separators or `..` are rejected, so a crafted ID can no longer copy directories from outside `.backups/` into the environment.
A path traversal vulnerability has been identified in the backup restoration feature of Network-AI, a TypeScript/Node.js multi-agent orchestrator. This issue affects versions prior to 5.12.2. The vulnerability arises in the `EnvironmentManager.restore(env, backupId)` method, which computes the backup path based on the provided backup ID without properly validating it. As a result, a malicious user can craft a backup ID that traverses directories, such as `../../../outside/source-dir`, to restore files from arbitrary locations into the environment's data directory. The vulnerability has been confirmed in Network-AI version 5.12.1.
Users can upgrade to Network-AI version 5.12.2, which addresses the vulnerability by validating backup IDs to prevent traversal attacks. The updated version is available on npm.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 20, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/Jovancoding/Network-AI/security/advisories/GHSA-48x2-6pr9-2jjf | CISA-ADP | ExploitPatchVendor Advisory |
| https://github.com/Jovancoding/Network-AI/commit/a59c13a1f0ce0e8a0779a90343eef92fac5ab4c3 | [email protected] | Patch |
| https://github.com/Jovancoding/Network-AI/releases/tag/v5.12.2 | [email protected] | PatchRelease Notes |
| https://github.com/Jovancoding/Network-AI/security/advisories/GHSA-48x2-6pr9-2jjf | [email protected] | ExploitPatchVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | [email protected] |
| CWE-23 | Relative Path Traversal | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| network-ai network-ai | < 5.12.2 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 13, 2026 | Initial Analysis | [email protected] |
| Jul 20, 2026 | CVE Modified | CISA-ADP |
| Jul 20, 2026 | New CVE Received | [email protected] |