CVE-2026-39306: Path Traversal in PraisonAI

This vulnerability allows an attacker to achieve arbitrary file write on the client machine pulling the recipe. By crafting a malicious .praison archive with ../ sequences, an attacker can overwrite critical system files or inject malicious code. The impact extends to both local and HTTP recipe registry pull mechanisms. Successful exploitation could lead to system compromise, data exfiltration, or denial of service, depending on the files overwritten. The client-side nature of the vulnerability means that the attacker does not need direct access to the PraisonAI server, only the ability to publish a malicious recipe.

1. Reserved2026-04-06
2. Published2026-04-06
3. Modified2026-04-07
4. EPSS updated2026-04-15

The primary mitigation is to upgrade PraisonAI to version 4.5.113 or later, which includes the necessary path validation fixes. As an immediate workaround, restrict the directories where users can pull recipes to highly controlled locations. Implement strict input validation on the server-side to prevent the upload of malicious .praison archives. Consider using a Web Application Firewall (WAF) to filter out requests containing suspicious path traversal patterns. Regularly scan your PraisonAI installations for vulnerabilities using automated security tools.