PT-2026-30766 · Praisonai · Praisonai

Liyander · Published 2026-04-06 · Updated 2026-04-07 · CVE-2026-39307

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 1.5.113

Description PraisonAI is a multi-agent teams system. The templates installation feature is susceptible to a "Zip Slip" Arbitrary File Write attack. When downloading and extracting template archives from external sources, the application uses Python’s zipfile.extractall() without verifying if the files within the archive resolve outside of the intended extraction directory. A specially crafted ZIP archive can contain file entries with relative paths that, when extracted, can overwrite arbitrary files on the victim’s filesystem. The vulnerable code is located in src/praisonai/praisonai/cli/features/templates.py (Line 852) and uses the zipfile.extractall() function. A proof-of-concept involves creating a malicious ZIP archive with file entries containing directory traversal sequences (e.g., '../../../../../../../tmp/zip slip pwned.txt') and tricking a user into installing the template. This can lead to system corruption or Remote Code Execution (RCE).

Recommendations Update to PraisonAI version 1.5.113 or later.

Fix

Relative Path Traversal

Path traversal

Weakness Enumeration

CWE-23

CWE-22

Related Identifiers

CVE-2026-39307

GHSA-4PH2-F6PF-79WV

Affected Products

Praisonai

References · 6

• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-4ph2-f6pf-79wv · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-4ph2-f6pf-79wv · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-39307 · Security Note
• https://github.com/MervinPraison/PraisonAI · Note
• https://github.com/MervinPraison/PraisonAI/releases/tag/v4.5.113 · Note
• https://twitter.com/CVEnew/status/2041569971072069891 · Twitter Post