CVE-2026-58413: Jovancoding Network-AI path traversal in EnvironmentManager

CVE-2026-58413 · Severity: medium · CVSS 6.1 · Published 2026-07-20

Network-AI is a multi-agent coordination framework that manages environment data and backups. The EnvironmentManager.restore() function improperly validates backup identifiers, allowing an authenticated user to traverse the filesystem and copy arbitrary directories from outside the backup location into the environment data directory. This can expose sensitive files, overwrite configuration files, or break environment isolation.

Technologies: Jovancoding Network-AI. Vendors: Jovancoding.

Quick answers

Is CVE-2026-58413 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-58413 being exploited in the wild.
How severe is CVE-2026-58413?
Medium severity, with a CVSS score of 6.1, published 20 July 2026.
Which products and versions are affected?
Jovancoding Network-AI < 5.12.2, <= 5.12.1.
Is there a fix for CVE-2026-58413?
A patch was published on 2026-06-18: Fixed in v5.12.2 (commit a59c13a) Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-58413 attacked?
It is attacked with local access, in a software library.
Am I affected by CVE-2026-58413?
Check whether you run Jovancoding Network-AI at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability is a path traversal issue (CWE-22, CWE-23) in the EnvironmentManager.restore(env, backupId) method. The function constructs a backup path by joining the environment backups directory with a caller-controlled backupId parameter without resolving or validating path containment: const backupPath = join(backupsDir, backupId). An attacker can supply backupId values like ../../../outside/secret-src to escape the intended .backups directory and copy files from arbitrary locations readable by the process. The restore method then iterates over collected files and copies them into the environment data directory using copyFileSync(). This requires local or authenticated network access (via the CLI: network-ai env backup restore --env &lt;env&gt; --backup &lt;id&gt;) and local filesystem read permissions on the source. The fix (v5.12.2, commit a59c13a) validates backupId against /^[\w\-]+$/ and asserts that the resolved path remains under the backups directory, rejecting any traversal attempts.

Affected products

  • Jovancoding Network-AI <= 5.12.1

Identifiers

  • CVE-2026-58413
  • GHSA-48x2-6pr9-2jjf

Timeline

  • 2026-06-19: disclosed: GHSA-48x2-6pr9-2jjf published
  • 2026-06-18: patched: Fixed in v5.12.2 (commit a59c13a)

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.