HIGH 8.7 NVD
CVE-2026-120312
Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnerability in AgentVCR that allows attackers controlling the cassette name to read or write ar
Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnerability in AgentVCR that allows attackers controlling the cassette name to read or write arbitrary .json files. Attackers can pass traversal sequences to load() or save() to disclose sensitive JSON data or overwrite policy files such as AuthGuardian trust-level configuration.
References
- https://github.com/Jovancoding/Network-AI/security/advisories/GHSA-mfxv-jg44-xj48
- https://www.vulncheck.com/advisories/network-ai-5.13.4-before-5.15.5-path-traversal-via-ag
This high severity vulnerability with a CVSS score of 8.7 was published on 2026-11-02 via NVD.
vulnfeed aggregates 15261 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.