npm/network-ai CVE-2026-58481: medium 6.5, EPSS 0.19%
Network-AI: AgentRuntime sandbox path-prefix checks allow file access outside the configured base directory
Action: Upgrade network-ai to 5.12.2 or later.
npm i network-ai@5.12.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.12.2 | - |
Fixed versions
| 5.12.2 |
Sources
- osv: GHSA-jvcm-f35g-w78p
- https://github.com/Jovancoding/Network-AI/security/advisories/GHSA-jvcm-f35g-w78p
- https://github.com/Jovancoding/Network-AI/commit/a59c13a1f0ce0e8a0779a90343eef92fac5ab4c3
- https://github.com/Jovancoding/Network-AI
- https://github.com/Jovancoding/Network-AI/releases/tag/v5.12.2
CVE-2026-58481 · published · modified · JSON