{"cve":"CVE-2026-39306","nvd":{"published":"2026-04-07T17:16:36.470","modified":"2026-10-26T21:10:00.170","status":"Analyzed","description":"PraisonAI is a multi-agent teams system. Prior to 1.5.113, PraisonAI's recipe registry pull flow extracts attacker-controlled .praison tar archives with tar.extractall() and does not validate archive member paths before extraction. A malicious publisher can upload a recipe bundle that contains ../ traversal entries and any user who later pulls that recipe will write files outside the output directory they selected. This is a path traversal / arbitrary file write vulnerability on the client side of the recipe registry workflow. It affects both the local registry pull path and the HTTP registry pull path. The checksum verification does not prevent exploitation because the malicious traversal payload is part of the signed bundle itself. This vulnerability is fixed in 1.5.113.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H","score":7.3},"cwes":["CWE-22"],"references":["https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-4rx4-4r3x-6534"],"products":["praison:praisonai"],"source":"nvd","synced_at":"2026-10-26T21:38:48.864438205+00:00"},"epss":{"cve":"CVE-2026-39306","score":0.00291,"percentile":0.21481,"date":"2026-10-26"},"kev":null,"osv":[{"id":"GHSA-4rx4-4r3x-6534","url":"https://osv.dev/vulnerability/GHSA-4rx4-4r3x-6534","summary":"PraisonAI recipe registry pull path traversal writes files outside the chosen output directory","modified":"2026-07-13T16:43:03.092252419Z","packages":[{"ecosystem":"PyPI","name":"praisonai","purl":"pkg:pypi/praisonai","ranges":["<4.5.113"],"fixed":["4.5.113"]}]},{"id":"PYSEC-2026-2900","url":"https://osv.dev/vulnerability/PYSEC-2026-2900","summary":"PraisonAI recipe registry pull path traversal writes files outside the chosen output directory","modified":"2026-07-13T16:33:01.225562921Z","packages":[{"ecosystem":"PyPI","name":"praisonai","purl":"pkg:pypi/praisonai","ranges":["<4.5.113"],"fixed":["4.5.113"]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}