{"id":"CVE-2026-40157","aliases":["GHSA-99g3-w8gr-x37c","PYSEC-2026-469"],"url":"https://o3.security/vulnerability/CVE-2026-40157","summary":"PraisonAI affected by arbitrary file write via path traversal in `praisonai recipe unpack`","details":"PraisonAI is a multi-agent teams system. Prior to 4.5.128, cmd_unpack in the recipe CLI extracts .praison tar archives using raw tar.extract() without validating archive member paths. A .praison bundle containing ../../ entries will write files outside the intended output directory. An attacker who distributes a malicious bundle can overwrite arbitrary files on the victim's filesystem when they run praisonai recipe unpack. This vulnerability is fixed in 4.5.128.","published":"2026-04-10T16:47:16.109Z","modified":"2026-08-07T11:51:01.984538852Z","cvss":null,"epss":{"score":0.00379,"percentile":0.30571,"asOf":"2026-08-06"},"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"PyPI","name":"praisonai","fixedVersion":"4.5.128"}],"fix":null,"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/40xxx/CVE-2026-40157.json"},{"type":"ADVISORY","url":"https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-99g3-w8gr-x37c"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-40157"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-08-07T11:51:01.984538852Z"}}