Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.1

PraisonAI template download can place files anywhere

CVE-2026-39307 · published 7 months ago
Summary

PraisonAI versions before 1.5.113 let specially crafted template files be extracted to locations outside the program's folder. This could let an attacker add or overwrite files on the server, potentially leading to further compromise. Upgrade to version 1.5.113 or later to stop the unsafe extraction behavior.

What to do
  • Update mervin praison praisonai to version 4.5.113.
Affected software
Ecosystem VendorProductAffected versions
pip mervin praison praisonai <= 4.5.112
Fix: upgrade to 4.5.113
– praison praisonai <= 4.5.112
cpe:2.3:a:praison:praisonai:*:*:*:*:*:*:*:*
Original advisory text
PraisonAI has an Arbitrary File Write (Zip Slip) in Templates Extraction
PraisonAI is a multi-agent teams system. Prior to 1.5.113, The PraisonAI templates installation feature is vulnerable to a "Zip Slip" Arbitrary File Write attack. When downloading and extracting template archives from external sources (e.g., GitHub), the application uses Python's zipfile.extractall() without verifying if the files within the archive resolve outside of the intended extraction directory. This vulnerability is fixed in 1.5.113.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
8.1 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-23Relative Path Traversal
CWE-22Path Traversal
Timeline
Published7 Apr 2026
Updated4 Nov 2026
First seen6 Apr 2026
Sources
GHSA-4ph2-f6pf-79wv · GHSA
CVE-2026-39307 · NVD
CVE-2026-39307 · OSV
Track software like this
Free during beta