Threats tagged 'ghsa-5c2w-7m65-p4gf'

Network-AI versions from 5.13.4 up to but not including 5.15.5 contain a path traversal vulnerability in the AgentVCR component. This flaw allows attackers who can control the cassette name parameter to read or write arbitrary JSON files. Exploitation can lead to disclosure of sensitive JSON data or overwriting of critical policy files such as AuthGuardian trust-level configurations.