{"id":"CVE-2026-120311","published":"2026-11-02T03:17:28.663","lastModified":"2026-11-02T03:17:28.803","description":"Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnerability in FileJobStore that allows attackers to read or delete arbitrary .json files by supplying traversal sequences in the job id. Attackers controlling the id passed to FileJobStore.get(), FileJobStore.delete(), or JobQueue.getJob() can disclose credentials and grant tokens or delete configuration files to weaken AuthGuardian authorization.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-23"],"vendors":[],"products":[],"references":[{"url":"https://github.com/Jovancoding/Network-AI/security/advisories/GHSA-v64j-mc7x-c7x7","tags":[]},{"url":"https://www.vulncheck.com/advisories/network-ai-5.13.4-before-5.15.5-path-traversal-via-filejobstore-job-id","tags":[]}],"exploitRefs":[{"url":"https://github.com/Jovancoding/Network-AI/security/advisories/GHSA-v64j-mc7x-c7x7","tags":[]}],"hasPoc":true,"ai":{"summary":"A path traversal flaw in the FileJobStore component of Network-AI (versions before 5.15.5) allows authenticated attackers to read or delete arbitrary .json files by injecting directory traversal sequences (e.g., ../../) into job IDs passed to get(), delete(), or getJob() functions, enabling credential theft and configuration file deletion.","exploitability":"Exploitation requires low skill and only valid authentication credentials, with no user interaction needed.","blast_radius":"Successful exploitation could lead to full compromise of AuthGuardian authorization by leaking sensitive tokens/credentials or deleting critical configuration files, potentially disabling access controls across the system.","remediation":"Upgrade Network-AI to version 5.15.5 or later.","detection":"Monitor for requests to FileJobStore endpoints containing path traversal patterns (e.g., %2e%2e/, ..%2f, %252e%252e) in job ID parameters, especially when combined with .json file extensions or unexpected file access attempts.","tags":["path-traversal","auth-bypass","credential-theft","file-deletion","web","api"],"model":"garnet-coder","analyzedAt":"2026-11-02T09:55:59.545Z"}}