Executive Summary

CVE-2026-39307 is a high-severity vulnerability known as a Zip Slip Arbitrary File Write in the PraisonAI package versions up to 4.5.112. It occurs in the templates installation feature where the application uses Python's zipfile.extractall() method without validating the paths of files inside the ZIP archive.

This lack of validation allows an attacker to craft a malicious ZIP archive containing directory traversal paths (e.g., ../../../../tmp/evil.sh) that can write files outside the intended extraction directory when the template is installed.

An attacker can exploit this by tricking a user into installing a malicious template via the CLI command, causing arbitrary files to be written anywhere on the victim's filesystem.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can lead to arbitrary files being written anywhere on your system, including critical system files, user configuration files, or application code.

Such unauthorized file writes can cause system corruption, compromise application integrity, and potentially allow full Remote Code Execution (RCE) by an attacker.

The CVSS score of 8.1 indicates a high severity impact with low attack complexity and no privileges required, meaning it is relatively easy for an attacker to exploit if a user installs a malicious template.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability can be detected by monitoring for suspicious template installation commands that involve downloading and extracting ZIP archives from untrusted sources.

Specifically, look for usage of the CLI command pattern: `praisonai templates install github:attacker/malicious_template` or similar commands that install templates from external repositories.

Additionally, you can check your filesystem for unexpected files created outside the intended extraction directory, such as files in `/tmp/` or other unusual locations.

• Use command-line tools to search for suspicious files, for example: `find /tmp -name 'zip_slip_pwned.txt'`
• Monitor process execution logs or shell history for the use of `praisonai templates install` commands with untrusted sources.

Useful 0 Not Useful 0

Mitigation Strategies

The immediate mitigation step is to upgrade PraisonAI to version 1.5.113 or later, where this vulnerability is fixed.

Until the upgrade is applied, avoid installing templates from untrusted or external sources that could contain malicious ZIP archives.

Implement monitoring to detect any unauthorized file writes outside the intended extraction directories.

Consider restricting user permissions to limit the impact of arbitrary file writes.

Useful 0 Not Useful 0

Compliance Impact

The provided information does not specify any direct impact of this vulnerability on compliance with common standards and regulations such as GDPR or HIPAA.

Useful 0 Not Useful 0