Most recent entries from all

EUVD-2026-338949

fkie_cve-2026-58413

Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `EnvironmentManager.restore(env, backupId)` computes the backup path with `join(envDir, '.backups', backupId)` and only checks that this path exists. It does not resolve the result or verify that it remains under `data/<env>/.backups`. A caller can pass a traversal backup ID such as `../../../outside/source-dir` to restore files from an arbitrary directory into the target environment data directory. The issue is fixed in v5.12.2. `restore()` now validates `backupId` against `/^[\w\-]+$/` and asserts `dirname(resolve(join(backupsDir, backupId))) === resolve(backupsDir)` before touching the filesystem. Backup IDs containing path separators or `..` are rejected, so a crafted ID can no longer copy directories from outside `.backups/` into the environment.

GHSA-48x2-6pr9-2jjf — Network-AI: EnvironmentManager.restore() backup ID path traversal copies arbitrary directories into environment data

Affected: npm: network-ai

### Summary `EnvironmentManager.restore(env, backupId)` computes the backup path with `join(envDir, '.backups', backupId)` and only checks that this path exists. It does not resolve the result or verify that it remains under `data/<env>/.backups`.

A caller can pass a traversal backup ID such as `../../../outside/source-dir` to restore files from an arbitrary directory into the target environment data directory. Confirmed in Network-AI 5.12.1.

### Details `restore()` builds `backupPath` directly from caller-controlled `backupId`:

```ts restore(env: EnvName, backupId: string): RestoreResult { const envDir = this.getDataDir(env); const backupsDir = join(envDir, '.backups'); const backupPath = join(backupsDir, backupId);

if (!existsSync(backupPath)) { throw new Error(`Backup '${backupId}' not found for environment '${env}'`); }

this.backup(env);

return { backupId, env, filesRestored: restored }; } ```

There is no resolved containment check that ensures `backupPath` remains under `backupsDir`.

Default CLI reachability exists through…