CVE-2026-120312

Summary

A path traversal flaw in AgentVCR (part of Network-AI 5.13.4–5.15.4) lets authenticated attackers with control over cassette names read or write arbitrary .json files by injecting traversal sequences into load() or save() calls.

Exploitability

Exploitation requires valid low-privilege credentials and the ability to influence the cassette name parameter passed to AgentVCR’s load() or save() functions.

Blast radius

Successful exploitation could expose sensitive JSON data (e.g., credentials, internal configs) or overwrite critical policy files like AuthGuardian trust-level settings, potentially enabling privilege escalation or authentication bypass.

Detection

Defenders should monitor for unusual file access patterns to .json files outside expected directories in AgentVCR logs, especially requests containing sequences like ../ or %2e%2e/ in cassette name parameters.

Prioritized remediation

Upgrade Network-AI to version 5.15.5 or later, which patches the path traversal vulnerability in AgentVCR.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.