4 matches found
CVE-2026-120313
Network-AI before 5.15.5 contains a path traversal vulnerability in InputSanitizer.sanitizePath that allows attackers to escape the base directory using sibling-directory paths. Attackers can supply paths whose directory name shares a string prefix with the base, bypassing the unanchored startsWi...
CVE-2026-120313 Network-AI before 5.15.5 Path Traversal via InputSanitizer.sanitizePath
Network-AI before 5.15.5 contains a path traversal vulnerability in InputSanitizer.sanitizePath that allows attackers to escape the base directory using sibling-directory paths. Attackers can supply paths whose directory name shares a string prefix with the base, bypassing the unanchored startsWi...
CVE-2026-120313
Network-AI versions prior to 5.15.5 are vulnerable to a path traversal vulnerability in the InputSanitizer.sanitizePath() function. The root cause is an unanchored startsWith check , which allows attackers to bypass directory restrictions by supplying sibling-directory paths that share a string p...
EUVD-2026-115002
Network-AI before 5.15.5 contains a path traversal vulnerability in InputSanitizer.sanitizePath that allows attackers to escape the base directory using sibling-directory paths. Attackers can supply paths whose directory name shares a string prefix with the base, bypassing the unanchored startsWi...