PT-2026-30765

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 1.5.113 Description PraisonAI's recipe registry pull flow extracts attacker-controlled .praison tar archives using tar.extractall without validating archive member paths before extraction. A malicious publisher can...