Executive brief
Network-AI is a tool used for managing environment data and backups. A security flaw in its restore function allows a user with local access to manipulate file paths, potentially copying sensitive files from the host system into the application's data directory. This could lead to the exposure of private information or the corruption of environment configurations.
Technical details
A path traversal vulnerability exists in the `EnvironmentManager.restore()` function of Network-AI. The application fails to sanitize the `backupId` parameter, which is used to construct a filesystem path via `join(envDir, '.backups', backupId)`. By providing a relative path such as `../../../`, an attacker can escape the intended backup directory. This allows the restoration (copying) of arbitrary readable directories from the host filesystem into the target environment's data directory. The vulnerability is reachable via the CLI command `network-ai env backup restore`. A fix is available in version 5.12.2 which implements regex validation and path resolution checks.
Affected products
- Jovancoding network-ai <= 5.12.1
Timeline
- 2026-06-18: patched: Fixed in version 5.12.2 via commit a59c13a
- 2026-06-19: advisory: GitHub Advisory GHSA-48x2-6pr9-2jjf published
References
- https://github.com/Jovancoding/Network-AI/security/advisories/GHSA-48x2-6pr9-2jjf
- https://github.com/Jovancoding/Network-AI/commit/a59c13a1f0ce0e8a0779a90343eef92fac5ab4c3
- https://github.com/Jovancoding/Network-AI/releases/tag/v5.12.2
- https://api.github.com/repos/Jovancoding/Network-AI/security-advisories/GHSA-48x2-6pr9-2jjf