CVE-2026-120312

The Network-AI software (versions 5.13.4 before 5.15.5 ) is vulnerable to a path traversal vulnerability within the AgentVCR component. An attacker who can control the cassette name can inject traversal sequences into the load() or save() functions to read or write arbitrary .json files. This cou...