https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 07:59:50 +0000 https://cve.radiocsirt.org/vuln/cve-2026-58484 <p><strong>Affected:</strong> Jovancoding Network-AI</p> <p>Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `EnvironmentManager.listBackups()` reads each backup&#39;s `_manifest.json` and trusts the manifest&#39;s `path` field. `EnvironmentManager.pruneBackups()` later passes that trusted `entry.path` directly to `rmSync(entry.path, { recursive: true, force: true })`. An attacker who can place or modify a manifest inside `data/&lt;env&gt;/.backups/&lt;name&gt;/_manifest.json` can cause `network-ai env backup prune --env &lt;env&gt; --keep &lt;n&gt;` or any code path invoking `pruneBackups()` to recursively delete an arbitrary path accessible to the Network-AI process user. This is fixed in v5.12.2. `pruneBackups()` no longer passes `entry.path` from the on-disk manifest to `rmSync`. The deletion path is recomputed from a format-validated `entry.backupId`, and a `dirname` containment check confines deletion to exactly one level under the backups directory. A poisoned manifest (e.g. `&#34;path&#34;: &#34;/&#34;`) is now inert.</p> <p><strong>Affected:</strong> Jovancoding Network-AI</p> <p>Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `EnvironmentManager.listBackups()` reads each backup&#39;s `_manifest.json` and trusts the manifest&#39;s `path` field. `EnvironmentManager.pruneBackups()` later passes that trusted `entry.path` directly to `rmSync(entry.path, { recursive: true, force: true })`. An attacker who can place or modify a manifest inside `data/&lt;env&gt;/.backups/&lt;name&gt;/_manifest.json` can cause `network-ai env backup prune --env &lt;env&gt; --keep &lt;n&gt;` or any code path invoking `pruneBackups()` to recursively delete an arbitrary path accessible to the Network-AI process user. This is fixed in v5.12.2. `pruneBackups()` no longer passes `entry.path` from the on-disk manifest to `rmSync`. The deletion path is recomputed from a format-validated `entry.backupId`, and a `dirname` containment check confines deletion to exactly one level under the backups directory. A poisoned manifest (e.g. `&#34;path&#34;: &#34;/&#34;`) is now inert.</p> https://cve.radiocsirt.org/vuln/cve-2026-58484