HIGHCVSS v3.1 8.8Vulnerability
CVE-2026-120312
Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnerability in AgentVCR that allows attackers controlling the cassette name to read or write arbitrary .json files. Attackers can pass traversal sequences to load() or save() to disclose sensitive JSON data or overwrite policy files such as AuthGuardian trust-level configuration.
Properties
- Severity
- HIGH
- Nvd fetched at
- 2026-11-02T04:44:10.920480+00:00
- Cvss severity
- HIGH
- Cvss score
- 8.8
- Retrieved at
- 2026-11-02T04:46:17+00:00
- Score
- 8.8
- Cvss version
- 3.1
- Last source
- NVD
- Cve id
- CVE-2026-120312
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- First seen by Signal
- 2026-11-02T04:40:23+00:00
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Published at
- 2026-11-02T03:17:28.863
- Last modified
- 2026-11-02T03:17:28.997
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph