Network-AI versions before 5.12.2 have a path traversal vulnerability in the EnvironmentManager.backup() method. The backup process uses statSync to collect files recursively, which follows symbolic links. If an attacker can create a symlink inside the environment data directory pointing outside the environment root, the backup operation will follow the symlink and copy files from outside the environment into backup artifacts. This results in unauthorized disclosure of files outside the environment root. The vulnerability is addressed in version 5.12.2 by replacing statSync with lstatSync and skipping symbolic links during backup file collection, preventing traversal outside the environment root.

An attacker with the ability to place symbolic links under the environment data directory can cause backup operations to disclose files outside the intended environment root. This leads to confidentiality breaches by including unauthorized external files in backup artifacts. The vulnerability does not affect integrity or availability and requires at least low privileges (local access) to exploit.

A fix is available in Jovancoding Network-AI version 5.12.2. Users should upgrade to version 5.12.2 or later to prevent backup operations from following symbolic links and disclosing external files. No other mitigation is indicated by the vendor advisory.