4 matches found
CVE-2026-120312
Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnerability in AgentVCR that allows attackers controlling the cassette name to read or write arbitrary .json files. Attackers can pass traversal sequences to load or save to disclose sensitive JSON data or overwrite policy files suc...
EUVD-2026-115001
Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnerability in AgentVCR that allows attackers controlling the cassette name to read or write arbitrary .json files. Attackers can pass traversal sequences to load or save to disclose sensitive JSON data or overwrite policy files suc...
CVE-2026-120312 Network-AI 5.13.4 before 5.15.5 Path Traversal via AgentVCR Cassette Name
Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnerability in AgentVCR that allows attackers controlling the cassette name to read or write arbitrary .json files. Attackers can pass traversal sequences to load or save to disclose sensitive JSON data or overwrite policy files suc...
EUVD-2026-115000
Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnerability in FileJobStore that allows attackers to read or delete arbitrary .json files by supplying traversal sequences in the job id. Attackers controlling the id passed to FileJobStore.get, FileJobStore.delete, or JobQueue.getJ...