CVE-2026-58413
Received Received - Intake

Path Traversal in Network-AI Multi-Agent Orchestrator

Publication date: 2026-07-20

Last updated on: 2026-07-20

Assigner: GitHub, Inc.

Description
Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `EnvironmentManager.restore(env, backupId)` computes the backup path with `join(envDir, '.backups', backupId)` and only checks that this path exists. It does not resolve the result or verify that it remains under `data/<env>/.backups`. A caller can pass a traversal backup ID such as `../../../outside/source-dir` to restore files from an arbitrary directory into the target environment data directory. The issue is fixed in v5.12.2. `restore()` now validates `backupId` against `/^[\w\-]+$/` and asserts `dirname(resolve(join(backupsDir, backupId))) === resolve(backupsDir)` before touching the filesystem. Backup IDs containing path separators or `..` are rejected, so a crafted ID can no longer copy directories from outside `.backups/` into the environment.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-20
Last Modified
2026-07-20
Generated
2026-07-21
AI Q&A
2026-07-20
EPSS Evaluated
N/A
NVD
CVE-2026-58413
EUVD
EUVD-2026-46005

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
network-ai network-ai to 5.12.2 (exc)
jovancoding network-ai to 5.12.2 (exc)
jovancoding network-ai 5.12.2

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-23 The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.
CWE-22 The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-58413 is a path traversal vulnerability in Network-AI's EnvironmentManager.restore() function affecting versions 5.12.1 and earlier. The function uses user-controlled input (backupId) to construct a backup path without proper validation, allowing attackers to traverse outside the intended .backups directory. By passing a malicious backupId like ../../../outside/source-dir, an attacker can restore files from arbitrary directories into the target environment's data directory.

Detection Guidance

Check if you are running Network-AI versions 5.12.1 or earlier. Run 'npm list network-ai' to verify the installed version. Inspect environment restore operations for suspicious backup IDs containing path traversals like '../../' or '/'. Monitor file writes outside the intended .backups directory.

Impact Analysis

This vulnerability could allow attackers to copy sensitive files into restricted locations, overwrite configuration files, or break environment isolation. It may lead to unauthorized access to sensitive data, system compromise, or disruption of service if exploited.

Compliance Impact

This vulnerability could potentially violate compliance with GDPR and HIPAA by allowing unauthorized access to sensitive files. By exploiting path traversal, attackers could restore files from arbitrary directories into restricted locations, potentially exposing or overwriting sensitive data such as personal health information or personally identifiable information.

Mitigation Strategies

Upgrade Network-AI to version 5.12.2 or later immediately. Apply input validation to reject backup IDs containing path separators or '..' sequences. Restrict file system permissions to limit write access to the .backups directory. Review recent restore operations for unauthorized file copies.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-58413. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart