---
id: "CVE-2026-120312"
kind: "vulnerability"
aliases: ["CVE-2026-120312"]
title: "Network-AI: path traversal in AgentVCR lets attackers read or overwrite JSON files"
severity: "high"
cvss: 8.8
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: []
ecosystems: []
tags: ["agentvcr", "ai-agents", "ai-tooling", "network-ai", "node"]
not_affected_if: ["agentvcr-unused", "fixed-cassette-names"]
published_at: "2026-11-02T03:17:28+00:00"
first_seen_at: "2026-11-02T03:31:21+00:00"
updated_at: "2026-11-02T03:31:46+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-120312", "first_seen_at": "2026-11-02T03:31:21+00:00"}]
---

# Network-AI: path traversal in AgentVCR lets attackers read or overwrite JSON files

Network-AI versions from 5.13.4 before 5.15.5 let anyone who controls the cassette name in AgentVCR pass traversal sequences to load() or save(). An attacker can read sensitive JSON files or overwrite policy files such as the AuthGuardian trust-level configuration.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Network-AI version against `5.15.5` (for example `npm ls network-ai` in the project).
- Look for calls to AgentVCR load() or save() where the cassette name comes from user input or an agent.

## Fix

- Network-AI: move to `5.15.5` or later.

## Timeline

- 2026-11-02T03:31:21+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-120312

## From the sources

Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnerability in AgentVCR that allows attackers controlling the cassette name to read or write arbitrary .json files. Attackers can pass traversal sequences to load() or save() to disclose sensitive JSON data or overwrite policy files such as AuthGuardian trust-level configuration.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_