Most recent entries from all

EUVD-2026-339009

2026-10-06T19:44:18.760716+00:00

EUVD-2026-339009

fkie_cve-2026-58414

2026-10-06T19:44:18.760785+00:00

Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `EnvironmentManager.backup()` recursively collects files using `_collectBackupFiles()`. `_collectBackupFiles()` uses `statSync(full)`, which follows symlinks. If `data/` contains a symlink to a directory outside the environment root, backup recursion follows the symlink and copies external files into `data//.backups//`. An attacker who can place a symlink under the environment data directory can cause backup operations to disclose files outside the environment root into backup artifacts. The issue is fixed in v5.12.2. `_collectBackupFiles()` now uses `lstatSync` instead of `statSync` and skips any entry where `isSymbolicLink()` is true. Symlinks are never traversed, so `backup()` can no longer follow a link out of the environment root and copy external files into a backup artifact.

GHSA-6x2m-p4xp-wg22 — Network-AI: EnvironmentManager.backup() follows symlinked directories and copies files outside the environment root int…

2026-10-06T19:44:18.760845+00:00

Affected: npm: network-ai

### Summary `EnvironmentManager.backup()` recursively collects files using `_collectBackupFiles()`. `_collectBackupFiles()` uses `statSync(full)`, which follows symlinks. If `data/` contains a symlink to a directory outside the environment root, backup recursion follows the symlink and copies external files into `data//.backups//`.

An attacker who can place a symlink under the environment data directory can cause backup operations to disclose files outside the environment root into backup artifacts. Confirmed in Network-AI 5.12.1.

### Details `backup()` collects file paths and copies them into the backup directory:

```ts const files = this._collectBackupFiles(envDir); for (const rel of files) { const src = join(envDir, rel); const dst = join(backupPath, rel); mkdirSync(join(backupPath, rel.includes('/') ? rel.substring(0, rel.lastIndexOf('/')) : '.'), { recursive: true }); try { copyFileSync(src, dst); } catch { /* skip unreadable */ } } ```

`_collectBackupFiles()` follows symlinked directories because it calls `statSync()`, not `lstatSync()`:

```ts const info = statSync(full); if (info.isDirectory()) { walk(full, rel); } else { results.push(rel); } ```

Default CLI reachability exists through `network-ai env backup create --env `. `backup()` also runs automatically before promotion and restore operations.

Affected source evidence:

- `lib/env-manager.ts:435-460` — backup copy logic. - `lib/env-manager.ts:596-617` — symlink-followin…