Network-AI versions before 5.12.2 contain a path traversal vulnerability in the EnvironmentManager.restore(env, backupId) method. The method constructs a backup path by joining envDir, '.backups', and backupId, but only checks for path existence without resolving or verifying that the path remains within the intended backups directory. An attacker can supply a backupId with traversal sequences (e.g., '../../../outside/source-dir') to restore files from arbitrary locations into the environment data directory. The vulnerability is addressed in version 5.12.2 by enforcing a regex validation on backupId and asserting that the resolved backup path's directory matches the backups directory, preventing traversal outside the allowed directory.

An attacker with limited privileges can exploit this vulnerability to restore files from arbitrary directories into the target environment's data directory. This can lead to unauthorized disclosure of sensitive files (confidentiality impact is high) and partial integrity impact due to unauthorized file restoration. Availability is not affected. The CVSS 3.1 score is 6.1 (medium severity) reflecting local attack vector with low complexity and no user interaction required.

A fix is available in Network-AI version 5.12.2. Users should upgrade to version 5.12.2 or later to ensure that backup IDs are properly validated and path traversal is prevented. Until upgraded, avoid using untrusted input for backupId parameters. No vendor advisory content is provided to indicate alternative mitigations or temporary fixes.