github.com
https://github.com/MervinPraison/PraisonAI CVE-2026-40157
CRITICAL
PraisonAI affected by arbitrary file write via path traversal in `praisonai recipe unpack`
Record summary
CVE-2026-40157 has a selected CVSS score of 9.4 (critical).
Description
PraisonAI is a multi-agent teams system. Prior to 4.5.128, cmd_unpack in the recipe CLI extracts .praison tar archives using raw tar.extract() without validating archive member paths. A .praison bundle containing ../../ entries will write files outside the intended output directory. An attacker who distributes a malicious bundle can overwrite arbitrary files on the victim's filesystem when they run praisonai recipe unpack. This vulnerability is fixed in 4.5.128.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationPoC
AutomatableNo
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Apr 14, 2026 · Source: CVE List
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
PraisonAIBrowse MervinPraison / PraisonAI | CVE List | < 4.5.128 | affected |
PraisonAIBrowse PyPI / PraisonAI | GitHub Advisory | 2.7.2 to < 4.5.128 · Fixed in 4.5.128 | affected |
References
4github.com
https://github.com/MervinPraison/PraisonAI/releases/tag/v4.5.128 github.comConfirmation
https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-99g3-w8gr-x37c nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2026-40157