High severity7.5NVD Advisory· Published Nov 2, 2026· Updated Nov 2, 2026
CVE-2026-120313
CVE-2026-120313
Description
Network-AI before 5.15.5 contains a path traversal vulnerability in InputSanitizer.sanitizePath() that allows attackers to escape the base directory using sibling-directory paths. Attackers can supply paths whose directory name shares a string prefix with the base, bypassing the unanchored startsWith check to read, list, or write files outside the sandbox.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <5.15.5
- Range: <5.15.5
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.