CVE-2026-120311

Name of the Vulnerable Software and Affected Versions Network-AI versions 5.13.4 through 5.15.4

Description A path traversal issue exists in FileJobStore, enabling attackers to read or delete arbitrary .json files by using traversal sequences in the job identifier. By controlling the id passed to the functions FileJobStore.get(), FileJobStore.delete(), or JobQueue.getJob(), an attacker can disclose credentials and grant tokens or delete configuration files to weaken AuthGuardian authorization.

Recommendations Update Network-AI to version 5.15.5 or later.