Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, "EnvironmentManager.restore(env, backupId)" computes the backup path with "join(envDir, '.backups', backupId)" and only checks that this path exists. It does not resolve the result or verify that it remains under "data/<env>/.backups". A caller can pass a traversal backup ID such as "../../../outside/source-dir" to restore files from an arbitrary directory into the target environment data directory. The issue is fixed in v5.12.2. "restore()" now validates "backupId" against "/^[\w\-]+$/" and asserts "dirname(resolve(join(backupsDir, backupId))) === resolve(backupsDir)" before touching the filesystem. Backup IDs containing path separators or ".." are rejected, so a crafted ID can no longer copy directories from outside ".backups/" into the environment.