PraisonAI, a multi-agent teams system by MervinPraison, contains a path traversal vulnerability (CWE-22) in versions before 4.5.128. The vulnerability is due to the cmd_unpack function using raw tar.extract() without validating paths in .praison tar archives. Maliciously crafted bundles containing directory traversal sequences can cause files to be written outside the intended extraction directory, enabling arbitrary file overwrite. This can be exploited by an attacker distributing a malicious bundle that a victim unpacks using the recipe CLI. The vulnerability has a CVSS 4.0 score of 9.4, indicating critical severity. The issue is resolved in version 4.5.128.

An attacker who distributes a malicious .praison bundle can cause arbitrary files on the victim's filesystem to be overwritten when the victim runs the praisonai recipe unpack command. This can lead to significant system compromise depending on which files are overwritten. The vulnerability requires no privileges and no user interaction beyond running the unpack command on a crafted bundle. There are no known exploits in the wild at this time.

This vulnerability is fixed in PraisonAI version 4.5.128. Users should upgrade to version 4.5.128 or later to remediate this issue. Since no official patch link or advisory is provided, verify the upgrade availability with the vendor. Until upgraded, avoid unpacking untrusted .praison bundles to prevent exploitation.