PraisonAI MCP server has a critical path traversal vulnerability in its file-handling tools that allows an attacker to write arbitrary files outside the intended directory. This can be exploited to drop malicious Python .pth files into the user's site-packages directory, leading to arbitrary code execution in any subsequent Python process run by the user. The vulnerability arises from lack of input validation and containment checks in four default tools that accept file paths. Exploitation can occur without operator misconfiguration and can be triggered via MCP-connected LLMs or local processes. A fix is available in version 4.6.34.