CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2026-11-02
Network-AI AgentVCR Path Traversal Vulnerability Leading to Arbitrary File Read/Write (CVE-2026-120312)
[Affected Scope] Network-AI versions from 5.13.4 before 5.15.5
[Impact] Attackers can manipulate the cassette name to read or overwrite arbitrary .json files, potentially altering AuthGuardian trust-level configurations to escalate privileges
[Mitigation] Immediately upgrade Network-AI to version 5.15.5 or higher, and implement strict input validation on cassette names