CVE ID :CVE-2026-120312 Published : Nov. 2, 2026, 2:01 a.m. | 1 hour, 1 minute ago Description :Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnerability in AgentVCR that allows attackers controlling the cassette name to read or write arbitrary .json files. Attackers can...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-120312 - Network-AI 5.13.4 before 5.15.5 Path Traversal via AgentVCR Cassette Name

VERWANDTEARTIKEL

CVE-2026-120322 - Termix-SSH Termix transferToHost path traversal

CVE-2026-120317 - http4k 4.9.10.0 before 6.60.0.0 Digest auth-int Missing Body Integrity

CVE-2026-120316 - http4k before 6.62.0.0-ee Path Traversal via ThymeleafTemplates Template Resolution

CVE-2026-120315 - LobeHub Chat 1.84.26 before 2.1.49 Path Traversal RCE via writeTempFile

CVE-2026-120313 - Network-AI before 5.15.5 Path Traversal via InputSanitizer.sanitizePath

CVE-2026-120311 - Network-AI 5.13.4 before 5.15.5 Path Traversal via FileJobStore Job ID