A critical path traversal vulnerability in PraisonAI allows unauthenticated attackers to perform arbitrary file writes, potentially leading to remote code execution or system compromise.

This is a path traversal vulnerability (CWE-22) occurring when the application uses zipfile.extractall() to process template archives without verifying that extracted file paths reside within the intended directory. The attack vector is network-based and does not require authentication, though it typically requires user interaction to initiate the template download.

Successful exploitation of this flaw allows an attacker to overwrite arbitrary files on the host system, which can result in full system compromise or the execution of malicious code. Given the CVSS score of 8.1, this vulnerability poses a significant risk to the integrity and availability of the host environment, potentially enabling an attacker to gain persistent access to the server.

Immediate Action: Update the PraisonAI package to version 4.5.113 or later via PyPI to incorporate the necessary path validation fixes.

Proactive Monitoring: Review application logs for unusual file write operations or attempts to access directories outside of the designated template storage path.

Compensating Controls: Ensure the application runs with the least privilege necessary to limit the impact of an arbitrary file write if a compromise occurs.

Public Exploit Available: Unknown.

The severity of this file write vulnerability necessitates immediate attention, particularly in environments where PraisonAI handles external templates from untrusted sources. Administrators must prioritize updating to version 4.5.113 to remediate the underlying flaw and prevent potential unauthorized system modifications.