CVE-2026-120313
Deferred Deferred - Pending Action

Path Traversal in Network-AI Before 5.15.5

Publication date: 2026-11-02

Last updated on: 2026-11-02

Assigner: VulnCheck

Description
Network-AI before 5.15.5 contains a path traversal vulnerability in InputSanitizer.sanitizePath() that allows attackers to escape the base directory using sibling-directory paths. Attackers can supply paths whose directory name shares a string prefix with the base, bypassing the unanchored startsWith check to read, list, or write files outside the sandbox.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-02
Last Modified
2026-11-02
Generated
2026-11-02
AI Q&A
2026-11-02
EPSS Evaluated
N/A
NVD
CVE-2026-120313

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Jovancoding Network-AI 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-22 The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-120313 is a path traversal vulnerability in Network-AI versions before 5.15.5. The InputSanitizer.sanitizePath() function fails to properly validate paths, allowing attackers to escape the base directory using sibling-directory paths. For example, a base directory like /data/project could be bypassed by supplying a path like /data/project-evil/secret.txt, which shares a prefix with the base directory. This flaw enables unauthorized file access, read/write operations, or directory listings outside the intended sandbox.

Detection Guidance

Check if Network-AI versions 5.15.4 or earlier are installed using 'npm list network-ai' or 'npm list -g network-ai'. Inspect the InputSanitizer.sanitizePath() function in the codebase for the vulnerable path validation logic. Test paths with sibling-directory prefixes like '/data/project-evil/secret.txt' when the base is '/data/project' to confirm unauthorized access.

Impact Analysis

This vulnerability allows attackers to read, write, or list files outside the intended base directory. If exploited, sensitive files could be accessed or modified, leading to data breaches or system compromise. Attackers could also create malicious files in unauthorized locations, potentially enabling further attacks or persistence mechanisms.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating compliance requirements under GDPR (data protection) and HIPAA (health information privacy). Unauthorized file access may result in data breaches, triggering legal penalties, fines, or reputational damage for organizations handling regulated data.

Mitigation Strategies

Upgrade Network-AI to version 5.15.5 or later immediately. If upgrading is not possible, modify the InputSanitizer.sanitizePath() function to enforce strict path containment by ensuring the resolved path starts with the base directory followed by a path separator. Add test cases to validate sibling-directory path rejection.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-120313. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...