PT-2026-31787 · Praisonai · Praisonai

Published 2026-04-09 · Updated 2026-04-10 · CVE-2026-40148

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.5.128

Description PraisonAI is a multi-agent teams system. The safe extractall() function in the recipe registry validates archive members against path traversal attacks but does not check individual member sizes, cumulative extracted size, or member count before calling tar.extractall(). An attacker can publish a malicious recipe bundle containing highly compressible data that exhausts the victim's disk when pulled via LocalRegistry.pull() or HttpRegistry.pull().

Recommendations Update to version 4.5.128 or later.

Fix

Weakness Enumeration

CWE-409

Related Identifiers

CVE-2026-40148

GHSA-F2H6-7XFR-XM8W

Affected Products

Praisonai

References · 6

• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-f2h6-7xfr-xm8w · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-f2h6-7xfr-xm8w · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-40148 · Security Note
• https://github.com/MervinPraison/PraisonAI · Note
• https://github.com/MervinPraison/PraisonAI/releases/tag/v4.5.128 · Note
• https://twitter.com/CVEnew/status/2042561836063830146 · Twitter Post