EUVD-2026-46016

Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, EnvironmentManager.backup recursively collects files using collectBackupFiles. collectBackupFiles uses statSyncfull, which follows symlinks. If data/ contains a symlink to a directory outside the environment roo...

PT-2026-61638

Name of the Vulnerable Software and Affected Versions Network-AI versions prior to 5.12.2 Description The EnvironmentManager.backup function recursively collects files using the collectBackupFiles function. This process utilizes statSyncfull, which follows symbolic links symlinks. If a symlink to...