Lucene search
+L

3 matches found

osv_cve
osv_cve
•added 2026/04/07 4:49 p.m.•19 views

CVE-2026-39307 PraisonAI has an Arbitrary File Write (Zip Slip) in Templates Extraction

PraisonAI is a multi-agent teams system. Prior to 1.5.113, The PraisonAI templates installation feature is vulnerable to a "Zip Slip" Arbitrary File Write attack. When downloading and extracting template archives from external sources e.g., GitHub, the application uses Python's zipfile.extractall...

8.1CVSS5.9AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/04/07 4:49 p.m.•5 views

CVE-2026-39307 PraisonAI has an Arbitrary File Write (Zip Slip) in Templates Extraction

PraisonAI is a multi-agent teams system. Prior to 1.5.113, The PraisonAI templates installation feature is vulnerable to a "Zip Slip" Arbitrary File Write attack. When downloading and extracting template archives from external sources e.g., GitHub, the application uses Python's zipfile.extractall...

8.1CVSS5.9AI score0.00314EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2026/04/07 4:49 p.m.•36 views

CVE-2026-39307 PraisonAI has an Arbitrary File Write (Zip Slip) in Templates Extraction

PraisonAI is a multi-agent teams system. Prior to 1.5.113, The PraisonAI templates installation feature is vulnerable to a "Zip Slip" Arbitrary File Write attack. When downloading and extracting template archives from external sources e.g., GitHub, the application uses Python's zipfile.extractall...

8.1CVSS0.00314EPSS
SaveExploits1References1
Rows per page
Query Builder