Read the docs
TI-2026-83678 Aliases CVE-2026-120312GHSA-5c2w-7m65-p4gf

Path traversal in Network-AI AgentVCR lets attackers read and write JSON files

Priority MEDIUM 40CWE-23Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

Network-AI from 5.13.4 before 5.15.5 contains a path traversal flaw (CWE-23) in AgentVCR. Attackers who control the cassette name can pass traversal sequences to load() or save() to read or write arbitrary .json files. A remote attacker with low privileges can disclose sensitive JSON data or overwrite policy files such as the AuthGuardian trust-level configuration.

Written with Claude Haiku 5.5 from the sources below · 2026-11-02

Description from the CNA

Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnerability in AgentVCR that allows attackers controlling the cassette name to read or write arbitrary .json files. Attackers can pass traversal sequences to load() or save() to disclose sensitive JSON data or overwrite policy files such as AuthGuardian trust-level configuration.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00448 39th percentileScored 2026-11-07
Fix Fixed Network-AI (Jovancoding): 5.15.5

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
JovancodingNetwork-AI5.13.4 to before 5.15.55.15.5Patch availableCNA
  • Network-AI VendorJovancoding Affected 5.13.4 to before 5.15.5 Fixed in 5.15.5 Patch available CNA

CPE names Threatist (inferred) · 1

Inferred from how NVD named this product before; not given by a source.

CPEVersionsRoleVendor
cpe:2.3:a:network-ai:network-ai:*:*:*:*:*:*:*:*——Jovancoding
  • cpe:2.3:a:network-ai:network-ai:*:*:*:*:*:*:*:* Versions — — ·Jovancoding

Remediation

Jovancoding Network-AI users should upgrade to version 5.15.5, which fixes the flaw.

Written with Claude Haiku 5.5 from the sources below · 2026-11-02

  • Fix · CNA Network-AI (Jovancoding) Fixed in 5.15.5

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Jovancoding Network-AI 5.15.5

    4 records Highest priority Priority HIGH 3 HIGH, 1 MEDIUM

    Other records, highest priority first

    • TI-2026-83679 Path traversal in Network-AI sanitizer exposes files outside sandboxPriority HIGH 77
    • TI-2026-83677 Path traversal in Network-AI FileJobStore lets attackers read or delete filesPriority HIGH 73
    • TI-2026-83680 Missing authentication in Network-AI A2AServer task operationsPriority HIGH 70
    Show all 4 records →

Timeline

  1. 2026-11-02 Threatist record created from CVE-2026-120312
  2. 2026-11-02 Alias added: GHSA-5c2w-7m65-p4gf
  3. 2026-11-02 CISA SSVC decision points changed
  4. 2026-11-02 Priority changed: MEDIUM → LOW
  5. 2026-11-04 Priority changed: LOW → MEDIUM

References

Advisory 1

  • TI-2026-46183 Network-AI 5.12.2 through 5.13.3 Missing Authorization via ApprovalInbox CVSS 4.0CRITICAL 9.3
  • TI-2026-36083 Network-AI: Empty default secret still authorizes all requests (Incomplete fix for CVE-2026-46701) CVSS 3.1CRITICAL 9.1
  • TI-2026-83679 Path traversal in Network-AI sanitizer exposes files outside sandbox CVSS 4.0HIGH 8.7
  • TI-2026-46184 Network-AI before 5.13.4 Cryptographic Signature Verification Bypass CVSS 4.0HIGH 8.8
  • TI-2026-38985 Network-AI has an an OS Command Injection issue CVSS 3.1CRITICAL 9.9
  • TI-2026-83677 Path traversal in Network-AI FileJobStore lets attackers read or delete files CVSS 4.0HIGH 8.7
See all 19 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences