PT-2026-31994 · Praisonai · Praisonai

Published 2026-04-10 · Updated 2026-04-12 · CVE-2026-40157

Positive Technologies (AI Summary)

CVSS v4.0

9.4

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.5.128

Description PraisonAI is a multi-agent teams system. The cmd unpack function in the recipe CLI extracts .praison tar archives using tar.extract() without validating archive member paths. A malicious .praison bundle containing ../../ entries can write files outside the intended output directory, potentially overwriting arbitrary files on the victim's filesystem when the praisonai recipe unpack command is executed.

Recommendations Update to version 4.5.128 or later.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-40157

GHSA-99G3-W8GR-X37C

Affected Products

Praisonai

References · 8

• 🔥 https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-99g3-w8gr-x37c · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-40157 · Security Note
• https://osv.dev/vulnerability/GHSA-99g3-w8gr-x37c · Vendor Advisory
• https://github.com/MervinPraison/PraisonAI · Note
• https://github.com/MervinPraison/PraisonAI/releases/tag/v4.5.128 · Note
• https://twitter.com/0dayPublishing/status/2042651231680610483 · Twitter Post
• https://twitter.com/pulsepatchio/status/2043164370507542801 · Twitter Post
• https://twitter.com/CVEnew/status/2042710225208152506 · Twitter Post