EnvironmentManager.backup() was susceptible to path traversal where symbolic links escape the intended root. When the backup routine recursed into the symlinked target, files located outside the environment were inadvertently copied into the backup archive. This flaw allows an attacker who can write to the data directory to cause confidential or proprietary files from the broader system to be included in backups, creating an avenue for data exposure. The likely attack vector is an attacker who can write to the environment's data directory to place a malicious symlink; this requires local access to that directory.

The vulnerability affects Network‑AI released by Jovancoding, specifically all versions prior to 5.12.2. Any deployment of the orchestrator using an older code base is at risk when backups are taken, especially if users are allowed to create symbolic links inside the data/<env> folder.

The CVSS score of 5.5 indicates a medium severity risk, with an EPSS score of < 1% and the issue not listed in CISA KEV. Because the flaw relies on local write access to the data directory, the exploitation window is limited to environments where local users or compromised processes can create symlinks. Once exploited, the attacker can exfiltrate files outside the environment root through the backup artifacts, potentially revealing sensitive system files or configuration data.