CVE-2026-44340

PraisonAI is a multi-agent teams system. Prior to version 4.6.37, the _safe_extractall helper that all recipe pull, recipe publish, and recipe unpack flows route through validates each archive member's name for absolute paths, .. segments, and resolved-path escape — but does not validate member.linkname, does not reject symlink/hardlink members, and calls tar.extractall(dest_dir) without filter="data". A bundle that contains a symlink with a name inside dest_dir but a linkname pointing outside it, followed by a regular file whose path traverses through the just-created symlink, escapes dest_dir and lets the attacker write arbitrary content to an attacker-chosen location on the victim's filesystem. This issue has been patched in version 4.6.37.

• CWE-22
• CWE-59

• https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-9q28-ghcr-c4x3Exploit, Mitigation, Vendor Advisory

Published

May 8, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-44335PraisonAI is a multi-agent teams system. Prior to version 1.…9.8
• CVE-2026-44336PraisonAI is a multi-agent teams system. Prior to version 4.…9.6
• CVE-2026-44337PraisonAI is a multi-agent teams system. From version 2.4.1 …6.3
• CVE-2026-44338PraisonAI is a multi-agent teams system. From version 2.5.6 …7.3
• CVE-2026-44339PraisonAI is a multi-agent teams system. Prior to praisonai …8.6
• CVE-2026-4434Improper certificate validation in the PAM propagation WinRM…8.1
• CVE-2026-44341GoJobs is a REST API for a Job Board platform. The applicati…5.3
• CVE-2026-44342New API is a large language mode (LLM) gateway and artificia…5.3
• CVE-2026-44343WGDashboard is a dashboard for WireGuard VPN. Prior to 4.3.2…9.8
• CVE-2026-44345BentoML is a Python library for building online serving syst…8.8
• CVE-2026-44346BentoML is a Python library for building online serving syst…8.8
• CVE-2026-44347Warpgate is an open source SSH, HTTPS and MySQL bastion host…6.5