Executive brief
Network-AI is a tool used for managing environment data and configurations. A vulnerability in its backup system allows an attacker with local access to create symbolic links that trick the software into copying sensitive files from outside the intended data directory into backup archives. This could lead to the unauthorized exposure of system secrets or private user data when backups are exported or accessed.
Technical details
The `EnvironmentManager.backup()` function in Network-AI recursively collects files using a helper function `_collectBackupFiles()`. This helper uses Node.js `statSync()`, which automatically resolves symbolic links, rather than `lstatSync()`. If an attacker can place a symlink within the environment's data directory pointing to an external location, the backup process will traverse the link and include external files in the backup artifact. This vulnerability is reachable via the CLI and is also triggered automatically during environment promotion or restoration. The issue is fixed in version 5.12.2 by switching to `lstatSync()` and explicitly skipping symbolic links.
Affected products
- Jovancoding network-ai <= 5.12.1
Timeline
- 2026-06-18: disclosed
- 2026-06-18: patched: Fixed in v5.12.2
- 2026-06-19: advisory