PraisonAI versions prior to 4.6.37 contain a vulnerability in the _safe_extractall helper function used in recipe pull, publish, and unpack operations. The function validates archive member names to prevent path traversal but fails to validate symlink or hardlink targets (member.linkname). This allows a crafted archive with a symlink pointing outside the extraction directory, followed by a file traversing that symlink, to write arbitrary files outside the intended directory. This can lead to arbitrary file writes with attacker-controlled content on the victim system.