CVE-2026-58413: EnvironmentManager.restore() backup ID path traversal copies arbitrary directories into environment data
Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, EnvironmentManager.restore(env, backupId) computes the backup path with join(envDir, '.backups', backupId) and only checks that this path exists. It does not resolve the result or verify that it remains under data/<env>/.backups. A caller can pass a traversal backup ID such as ../../../outside/source-dir to restore files from an arbitrary directory into the target environment data directory. The issue is fixed in v5.12.2. restore() now validates backupId against /^[\w\-]+$/ and asserts dirname(resolve(join(backupsDir, backupId))) === resolve(backupsDir) before touching the filesystem. Backup IDs containing path separators or .. are rejected, so a crafted ID can no longer copy directories from outside .backups/ into the environment.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Network-AI (TypeScript/Node.js) - EnvironmentManager.restore()to a version that resolves this vulnerability.Fixed in 5.12.2
Event History
Frequently Asked Questions
What is the severity of CVE-2026-58413?
CVE-2026-58413 has a medium severity rating of 6.1.
How do I fix CVE-2026-58413?
To remediate CVE-2026-58413, upgrade Network-AI to version 5.12.2 or later.
What does CVE-2026-58413 vulnerability affect?
CVE-2026-58413 affects the EnvironmentManager.restore() function in the Network-AI TypeScript/Node.js multi-agent orchestrator.
What kind of vulnerability is CVE-2026-58413?
CVE-2026-58413 is categorized as a path traversal vulnerability.
What could exploit CVE-2026-58413 allow an attacker to do?
Exploiting CVE-2026-58413 could allow an attacker to copy arbitrary directories into environment data.