VulnSocial

CVE-2026-40157Patch(praison / praisonai)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch praison praisonai systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

PraisonAI is a multi-agent teams system. Prior to 4.5.128, cmd_unpack in the recipe CLI extracts .praison tar archives using raw tar.extract() without validating archive member paths. A .praison bundle containing ../../ entries will write files outside the intended output directory. An attacker who distributes a malicious bundle can overwrite arbitrary files on the victim's filesystem when they run praisonai recipe unpack. This vulnerability is fixed in 4.5.128.

praison CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Exploit / PoC references
Weakness type (CWE)
CWE-22

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • praisonai

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 3 signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-04-10); latest day: 1
  • 3 total mentions across 2 days

Affected systems

Vendors
praison
Products
praisonai

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-04-10: 2Mentions · 2026-04-12: 1Patch / Workaround · 2026-04-10: 1Patch / Workaround · 2026-04-12: 1Technical Details · 2026-04-10: 2Technical Details · 2026-04-12: 104-1004-12
Signal classification2 categories
Patch
266.7%
Disclosure
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-04-102
Disclosure1Patch1
2026-04-121
Patch1
Full discourse3 posts
  • PulsePatch.io@pulsepatchio
    Patch

    A critical path traversal vulnerability (CVE-2026-40157) in `PraisonAI` allows arbitrary file write via `recipe unpack`. Processing untrusted recipe files can lead to system compromise. Monitor for patches. #PraisonAI #infosec #pathtraversal https://www.pulsepatch.io/posts/cve-2026-40157-praisonai-arbitrary-file-write

    Post summary

    The post reports a critical path traversal flaw in PraisonAI that permits arbitrary file writes through recipe unpacking and urges users to monitor for forthcoming patches.

    0000041
    13 followersView on X
  • CVE@CVEnew
    Patch

    CVE-2026-40157 PraisonAI is a multi-agent teams system. Prior to 4.5.128, cmd_unpack in the recipe CLI extracts .praison tar archives using raw tar.extract() without validating arch… https://www.cve.org/CVERecord?id=CVE-2026-40157

    Post summary

    The post notes CVE‑2026‑40157 in PraisonAI's recipe CLI, indicating a flaw in unvalidated archive extraction and that version 4.5.128 contains the patch.

    0000094
    57.0K followersView on X
  • 0day Signal@0dayPublishing
    Disclosure

    🚨 CVE-2026-40157: PraisonAI affected by arbitrary ... Classic zip slip in AI tooling - raw tar.extract() without path validation means one malicious .praison bundle = full f... https://zerodaysignal.com/vulnerability/CVE-2026-40157 #netsec #vulnerability #CVE #sysadmin #zeroday

    Post summary

    The tweet announces CVE-2026-40157 as a classic zip slip vulnerability in PraisonAI caused by raw tar.extract() lacking path validation, with an external link to a vulnerability page.

    0000059
    204 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Apppraisonpraisonai---

Explore more

Back to dashboardpraison CVEspraisonai vulnerabilities