CVE-2026-58414
Received Received - Intake

Path Traversal in Network-AI via Symlink Exploitation

Publication date: 2026-07-20

Last updated on: 2026-07-20

Assigner: GitHub, Inc.

Description
Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `EnvironmentManager.backup()` recursively collects files using `_collectBackupFiles()`. `_collectBackupFiles()` uses `statSync(full)`, which follows symlinks. If `data/<env>` contains a symlink to a directory outside the environment root, backup recursion follows the symlink and copies external files into `data/<env>/.backups/<backupId>/`. An attacker who can place a symlink under the environment data directory can cause backup operations to disclose files outside the environment root into backup artifacts. The issue is fixed in v5.12.2. `_collectBackupFiles()` now uses `lstatSync` instead of `statSync` and skips any entry where `isSymbolicLink()` is true. Symlinks are never traversed, so `backup()` can no longer follow a link out of the environment root and copy external files into a backup artifact.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-20
Last Modified
2026-07-20
Generated
2026-07-21
AI Q&A
2026-07-20
EPSS Evaluated
N/A
NVD
CVE-2026-58414
EUVD
EUVD-2026-46016

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
network-ai network-ai to 5.12.2 (exc)
jovancoding network-ai to 5.12.2 (exc)
jovancoding network-ai 5.12.2

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-59 The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
CWE-22 The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects Network-AI, a TypeScript/Node.js multi-agent orchestrator. In versions before 5.12.2, the backup function recursively collects files using a method that follows symbolic links. An attacker can place a symlink in the environment data directory to trick the backup process into copying files from outside the environment into the backup folder.

Detection Guidance

Check if Network-AI version is below 5.12.2. Inspect backup artifacts for unexpected files. Look for symlinks in environment data directories that could indicate exploitation attempts.

Impact Analysis

If exploited, this vulnerability could allow unauthorized access to sensitive files outside the intended environment. Attackers could retrieve confidential data stored elsewhere on the system by accessing the backup artifacts. The impact depends on what files are accessible and who can access the backups.

Compliance Impact

This vulnerability could lead to unauthorized data exposure, violating compliance requirements such as GDPR or HIPAA. If sensitive personal or health data is leaked through backup artifacts, organizations may face legal penalties, fines, or reputational damage due to non-compliance with data protection regulations.

Mitigation Strategies

Upgrade Network-AI to version 5.12.2 or later. Review backup artifacts for unauthorized files. Remove any suspicious symlinks in environment data directories.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-58414. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart