Network-AI: EnvironmentManager.backup() follows symlinked directories and copies files outside the environment root into backups

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-58414 · Microsoft / collected KEV context

GHSA-6x2m-p4xp-wg22

cve-program · CVE-2026-58414

• https://github.com/Jovancoding/Network-AI/security/advisories/GHSA-6x2m-p4xp-wg22
• https://github.com/Jovancoding/Network-AI/commit/a59c13a1f0ce0e8a0779a90343eef92fac5ab4c3
• https://github.com/Jovancoding/Network-AI/releases/tag/v5.12.2

nvd · CVE-2026-58414

• https://github.com/Jovancoding/Network-AI/commit/a59c13a1f0ce0e8a0779a90343eef92fac5ab4c3
• https://github.com/Jovancoding/Network-AI/releases/tag/v5.12.2
• https://github.com/Jovancoding/Network-AI/security/advisories/GHSA-6x2m-p4xp-wg22

osv · GHSA-6x2m-p4xp-wg22

• https://github.com/Jovancoding/Network-AI/security/advisories/GHSA-6x2m-p4xp-wg22
• https://github.com/Jovancoding/Network-AI/commit/a59c13a1f0ce0e8a0779a90343eef92fac5ab4c3
• https://github.com/Jovancoding/Network-AI
• https://github.com/Jovancoding/Network-AI/releases/tag/v5.12.2

No related operational record is retained in the current change model.