CVE-2026-58484

Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `EnvironmentManager.listBackups()` reads each backup's `_manifest.json` and trusts the manifest's `path` field. `EnvironmentManager.pruneBackups()` later passes that trusted `entry.path` directly to `rmSync(entry.path, { recursive: true, force: true })`. An attacker who can place or modify a manifest inside `data/<env>/.backups/<name>/_manifest.json` can cause `network-ai env backup prune --env <env> --keep <n>` or any code path invoking `pruneBackups()` to recursively delete an arbitrary path accessible to the Network-AI process user. This is fixed in v5.12.2. `pruneBackups()` no longer passes `entry.path` from the on-disk manifest to `rmSync`. The deletion path is recomputed from a format-validated `entry.backupId`, and a `dirname` containment check confines deletion to exactly one level under the backups directory. A poisoned manifest (e.g. `"path": "/"`) is now inert.

• CWE-22
• CWE-73

• https://github.com/Jovancoding/Network-AI/commit/a59c13a1f0ce0e8a0779a90343eef92fac5ab4c3
• https://github.com/Jovancoding/Network-AI/releases/tag/v5.12.2
• https://github.com/Jovancoding/Network-AI/security/advisories/GHSA-2fmp-9rvw-hc96
• https://github.com/Jovancoding/Network-AI/security/advisories/GHSA-2fmp-9rvw-hc96

Published

Jul 20, 2026

Last Modified

Jul 21, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-58478Sustainable Irrigation Platform (SIP) through version 5.2.16…6.5
• CVE-2026-58479Sustainable Irrigation Platform (SIP) through version 5.2.16…9.8
• CVE-2026-5848A vulnerability was found in jeecgboot JimuReport up to 2.3.…4.7
• CVE-2026-58480Blocksy Companion Pro plugin for WordPress before 2.1.47 con…9.8
• CVE-2026-58481Network-AI is a TypeScript/Node.js multi-agent orchestrator.…6.5
• CVE-2026-58482Network-AI, a TypeScript/Node.js multi-agent orchestrator, h…5.9
• CVE-2026-58486HedgeDoc is an open source, real-time, collaborative, markdo…8.3
• CVE-2026-58487HedgeDoc is an open source, real-time, collaborative, markdo…5.1
• CVE-2026-58488HedgeDoc is an open source, real-time, collaborative, markdo…6.9
• CVE-2026-58489HedgeDoc is an open source, real-time collaborative markdown…6.8
• CVE-2026-5849A vulnerability was determined in Tenda i12 1.0.0.11(3862). …9.8
• CVE-2026-58492grav-plugin-database is the database plugin for Grav CMS. Pr…9.2