Network‑AI is a TypeScript/Node.js orchestrator used for managing environment backups. In versions prior to v5.12.2 the EnvironmentManager.listBackups() routine reads each backup’s _manifest.json and blindly trusts the "path" field. The pruneBackups() method later passes that unverified path directly to the low‑level filesystem delete call rmSync(...,{recursive:true,force:true}). Consequently an attacker who can write to data/<env>/.backups/<name>/_manifest.json can instruct Network‑AI to recursively delete any file or directory reachable by the process user. This gives the attacker the ability to erase arbitrary data, delete configuration files, and potentially cause a denial‑of‑service condition. The vulnerability aligns with the CWE‑22 (Path Traversal) and CWE‑73 (Directory Traversal), reflecting an unchecked file path leading to destructive file operations.

The flaw affects Jovancoding’s Network‑AI orchestrator versions older than 5.12.2. Exploitation requires the ability to write to data/<env>/.backups/<name>/_manifest.json. The only product listed in the CNA record is Network‑AI; no other extensions or forks are known to be impacted as of the latest advisory.

The CVSS score of 7.1 indicates moderate‑to‑high impact, while the EPSS score of <1% suggests a very low likelihood of exploitation in the immediate future. The vulnerability is not yet catalogued in the CISA KEV. Based on the description, the likely attack vector is local file manipulation—an attacker who can modify a manifest file in the backup directory can trigger a destructive prune operation. Exploitation is limited to environments where an attacker can obtain local file‑write access or elevate privileges to modify the manifest; once a poisoned manifest is present, any call to pruneBackups() will remove arbitrary data under the specified path.