{"data":{"id":"57bbe7af-2466-405f-a463-75b9bbdca207","title":"GHSA-2fmp-9rvw-hc96: Network-AI: Poisoned environment backup manifest allows arbitrary recursive deletion during backup pruning","summary":"Network-AI's EnvironmentManager.listBackups() trusts the path field in each backup's _manifest.json, and pruneBackups() passes that path directly to rmSync with recursive and force set. An attacker who can write a manifest under data/<env>/.backups/<name>/ can make network-ai env backup prune, or any call to pruneBackups(), recursively delete an arbitrary path the Network-AI process user can access. The issue was confirmed in Network-AI 5.12.1, and the advisory notes no RCE chain was confirmed.","solution":"Fixed in v5.12.2 (commit a59c13a). The deletion path is now recomputed from a format-validated entry.backupId, and a dirname containment check limits deletion to one level under the backups directory. Install with npm install network-ai@5.12.2.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-2fmp-9rvw-hc96","publishedAt":"2026-06-19T21:42:26.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["network-ai@<= 5.12.1 (fixed: 5.12.2)"],"affectedPackageNames":["network-ai"],"affectedPackageRefs":["npm:network-ai"],"affectedVendors":[],"affectedVendorsRaw":["Network-AI"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":["GHSA-2fmp-9rvw-hc96"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-06-19T21:42:26.000Z","fixReleasedAt":"2026-06-18T21:17:50.389Z","daysToFix":-1,"fixCheckedAt":"2026-10-29T21:34:06.961Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"network-ai","fixedVersion":"5.12.2","matchedVersion":"5.12.2","fixReleasedAt":"2026-06-18T21:17:50.389Z","daysToFix":-1,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:34:06.816Z"}]}}