CVE-2026-120313

Network-AI path validator accepts sibling-prefix escapes

Jovancoding · Network-AI InputSanitizer.sanitizePath

First documented disclosure · Review checkpoint

Summary

A sibling directory sharing the base directory’s name prefix can pass the path validator.

Severity and exploitation evidence

High · 8.7/10 · CVSS 4.0. Severity source.

Exploitation not established: Controlled researcher evidence; the reviewed primary sources do not establish malicious exploitation or a confirmed victim.

Exploitation evidence source

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

The containment test uses a raw string prefix without a path-separator boundary, treating a sibling such as project-evil as a child of project.

Conditions required

An application relies on this helper for attacker-influenced paths and performs filesystem operations on the returned path; a suitable sibling-prefix target must exist or be usable.

Potential impact

Out-of-sandbox reads or directory listing were demonstrated. Writes depend on the consuming application using the helper to authorize write destinations; process permissions remain binding.

Affected versions and configurations

Network-AI before 5.15.5; the original report did not establish an exact introducing version.

Fix and mitigation status

5.15.5 adds segment-boundary containment and rejects NUL bytes for this helper.

Practical next steps

Upgrade and test absolute and relative sibling-prefix paths. Use resolved path-segment containment and restrict filesystem authority at the operating-system level.

Operating lesson

A string prefix is not a directory containment check.

Evidence and limits

Public advisory and patch release October 17; CVE November 2. A previous fix in the separate SandboxPolicy path did not cover this helper. CNA High 8.7 CVSS 4.0 and 7.5 v3.1; no new victim or malicious exploitation is established.

Sources