PT-2026-61639 · Unknown · Network-Ai

CVE-2026-58481 · Published 2026-06-19 · Updated 2026-07-20

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Network-AI versions prior to 5.12.2

Description AgentRuntime implements scoped file access using a configured sandbox basePath, but utilizes raw string prefix tests for path containment checks. This allows an agent or user to access files or list directories outside the intended sandbox if the target path is in a sibling directory that shares the same base path prefix. This occurs when calling the readFile() and listDir() functions within AgentRuntime. The issue is addressed by updating SandboxPolicy.resolvePath() and isPathAllowed() to use separator-anchored prefix checks.

Recommendations Update to version 5.12.2.

Exploit

Fix

Relative Path Traversal

Path traversal

Weakness Enumeration

CWE-23

CWE-22

Related Identifiers

CVE-2026-58481

GHSA-JVCM-F35G-W78P

Affected Products

Network-Ai

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/58xxx/CVE-2026-58481.json · Exploit
• 🔥 https://github.com/Jovancoding/Network-AI/security/advisories/GHSA-jvcm-f35g-w78p · Exploit
• https://osv.dev/vulnerability/GHSA-jvcm-f35g-w78p · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-58481 · Security Note
• https://osv.dev/vulnerability/CVE-2026-58481 · Vendor Advisory
• https://github.com/Jovancoding/Network-AI/commit/a59c13a1f0ce0e8a0779a90343eef92fac5ab4c3 · Note
• https://github.com/Jovancoding/Network-AI/releases/tag/v5.12.2 · Note
• https://github.com/Jovancoding/Network-AI · Note