---
id: "CVE-2026-120311"
kind: "vulnerability"
aliases: ["CVE-2026-120311"]
title: "Network-AI: path traversal in job store reads or deletes arbitrary JSON files"
severity: "high"
cvss: 8.8
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: []
ecosystems: []
tags: ["ai-agents", "ai-tooling", "javascript", "network-ai", "node.js"]
not_affected_if: ["internal-only-job-ids", "versions-outside-range"]
published_at: "2026-11-02T03:17:28+00:00"
first_seen_at: "2026-11-02T03:31:21+00:00"
updated_at: "2026-11-02T03:31:46+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-120311", "first_seen_at": "2026-11-02T03:31:21+00:00"}]
---

# Network-AI: path traversal in job store reads or deletes arbitrary JSON files

Network-AI versions from 5.13.4 before 5.15.5 let a crafted job id escape the FileJobStore directory via path traversal. An attacker can read or delete arbitrary .json files, which can expose credentials and grant tokens or remove configuration that weakens AuthGuardian authorization.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Network-AI version, for example with `npm ls network-ai` in the project that depends on it.
- Look for any code path that passes user-controlled values into `FileJobStore.get()`, `FileJobStore.delete()`, or `JobQueue.getJob()`.

## Fix

- Network-AI: move to `5.15.5` or later.

## Timeline

- 2026-11-02T03:31:21+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-120311

## From the sources

Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnerability in FileJobStore that allows attackers to read or delete arbitrary .json files by supplying traversal sequences in the job id. Attackers controlling the id passed to FileJobStore.get(), FileJobStore.delete(), or JobQueue.getJob() can disclose credentials and grant tokens or delete configuration files to weaken AuthGuardian authorization.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_