CVE WATCH / VULNERABILITY DETAIL
CVE-2026-120312
HIGHCVSS 8.8NVD feed
Published 2 November 2026 · tracked since 2 November 2026
Description
Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnerability in AgentVCR that allows attackers controlling the cassette name to read or write arbitrary .json files. Attackers can pass traversal sequences to load() or save() to disclose sensitive JSON data or overwrite policy files su
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-120342 HIGH 7.3
- CVE-2026-120343 MEDIUM 4.3
- CVE-2026-120341 HIGH 7.3
- CVE-2026-120340 LOW 3.7
- CVE-2026-120339 MEDIUM 4.3
- CVE-2026-120322 CRITICAL 9.9
- CVE-2026-84172
- CVE-2026-84177
- CVE-2026-84231
- CVE-2026-87718