CVE-2026-120313

Network-AI versions prior to 5.15.5 are vulnerable to a path traversal vulnerability in the InputSanitizer.sanitizePath() function. The root cause is an unanchored startsWith check , which allows attackers to bypass directory restrictions by supplying sibling-directory paths that share a string p...