CVE-2026-44340: Arbitrary File Write via Symlink Traversal in PraisonAI Tar Extraction

Vulnerability ID: CVE-2026-44340

CVSS Score: 8.7

Published: 2026-05-11

PraisonAI versions prior to 4.6.37 contain a path traversal vulnerability in the _safe_extractall function. The flaw allows an attacker to write arbitrary files outside the intended extraction directory via maliciously crafted tar archives containing unresolved symbolic links.

TL;DR

A symlink-based path traversal in PraisonAI's recipe unpacking allows arbitrary file overwriting, potentially leading to remote code execution.

⚠️ Exploit Status: POC

Technical Details

CWE ID : CWE-59 (Link Following) / CWE-22 (Path Traversal)

Attack Vector : Network (Malicious Archive)

CVSS 4.0 Score : 8.7

CVSS 3.1 Score : 7.5

Impact : Arbitrary File Write / Remote Code Execution

EPSS Score : 0.00017

Exploit Status : PoC Available

Affected Systems

PraisonAI multi-agent teams system prior to 4.6.37

PraisonAI : < 4.6.37 (Fixed in: 4.6.37 )

Code…