CVE-2026-58484
Received Received - Intake

Path Traversal in Network-AI

Publication date: 2026-07-20

Last updated on: 2026-07-20

Assigner: GitHub, Inc.

Description
Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `EnvironmentManager.listBackups()` reads each backup's `_manifest.json` and trusts the manifest's `path` field. `EnvironmentManager.pruneBackups()` later passes that trusted `entry.path` directly to `rmSync(entry.path, { recursive: true, force: true })`. An attacker who can place or modify a manifest inside `data/<env>/.backups/<name>/_manifest.json` can cause `network-ai env backup prune --env <env> --keep <n>` or any code path invoking `pruneBackups()` to recursively delete an arbitrary path accessible to the Network-AI process user. This is fixed in v5.12.2. `pruneBackups()` no longer passes `entry.path` from the on-disk manifest to `rmSync`. The deletion path is recomputed from a format-validated `entry.backupId`, and a `dirname` containment check confines deletion to exactly one level under the backups directory. A poisoned manifest (e.g. `"path": "/"`) is now inert.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-20
Last Modified
2026-07-20
Generated
2026-07-21
AI Q&A
2026-07-20
EPSS Evaluated
N/A
NVD
CVE-2026-58484
EUVD
EUVD-2026-46034

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
network-ai network-ai 5.12.2
jovancoding network-ai 5.12.2
jovancoding network-ai to 5.12.2 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-22 The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
CWE-73 The product allows user input to control or influence paths or file names that are used in filesystem operations.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects Network-AI, a TypeScript/Node.js multi-agent orchestrator. It allows arbitrary filesystem deletion through a poisoned backup manifest. The issue occurs because the software trusts the 'path' field in a backup's '_manifest.json' file without validation. When pruning backups, it uses this untrusted path with a recursive delete operation, enabling attackers to delete any directory accessible to the Network-AI process user.

Detection Guidance

Check if Network-AI version is <= 5.12.1 by running: npm list network-ai. Inspect backup manifests in data/<env>/.backups/<name>/_manifest.json for suspicious path values like '/'. Look for unexpected deletions in system logs or directories.

Impact Analysis

An attacker with write access to the Network-AI data directory can craft a malicious manifest with a 'path' value pointing to critical system directories like root (/). This could lead to data loss, denial of service, or system compromise. The attack requires low privileges and no user interaction, making it highly dangerous for systems running vulnerable versions.

Compliance Impact

This vulnerability could lead to unauthorized data deletion or system disruption, violating integrity and availability requirements in GDPR and HIPAA. Data loss from arbitrary deletion may result in non-compliance with data protection obligations, potential fines, and reputational damage.

Mitigation Strategies

Upgrade Network-AI to version 5.12.2 or later using: npm update network-ai. Restrict write access to Network-AI data directories. Review and remove any untrusted _manifest.json files in backup directories.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-58484. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart