PT-2026-39007 · Praisonai · Praisonai

Dhiral2908 · CVE-2026-44340 · Published 2026-05-08 · Updated 2026-07-13

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.6.37

Description The safe extractall() helper function, used in recipe pull, recipe publish, and recipe unpack flows, fails to validate member.linkname and does not reject symlink or hardlink members. Additionally, it calls tar.extractall(dest dir) without the filter="data" option. An attacker can use a bundle containing a symlink that points outside the destination directory, followed by a regular file that traverses this symlink, to write arbitrary content to a chosen location on the victim's filesystem.

Recommendations Update to version 4.6.37.

Exploit

Fix

Link Following

Path traversal

Weakness Enumeration

CWE-59

CWE-22

Related Identifiers

CVE-2026-44340

GHSA-9Q28-GHCR-C4X3

PYSEC-2026-2909

Affected Products

Praisonai

References · 10

• 🔥 https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-9q28-ghcr-c4x3 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/44xxx/CVE-2026-44340.json · Exploit
• https://osv.dev/vulnerability/CVE-2026-44340 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-44340 · Security Note
• https://osv.dev/vulnerability/GHSA-9q28-ghcr-c4x3 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2026-2909 · Vendor Advisory
• https://github.com/MervinPraison/PraisonAI · Note
• https://pypi.org/project/praisonai · Note
• https://github.com/advisories/GHSA-9q28-ghcr-c4x3 · Note
• https://twitter.com/CVEnew/status/2052811033010422092 · Twitter Post