CVE-2026-40148
published 2026-04-09CVE-2026-40148: PraisonAI is a multi-agent teams system. Prior to 4.5.128, the _safe_extractall() function in PraisonAI's recipe registry validates archive members against…
PriorityP432medium6.5CVSS 3.1
AVNACLPRNUIRSUCNINAH
EPSS
0.24%
15.3th percentile
PraisonAI is a multi-agent teams system. Prior to 4.5.128, the _safe_extractall() function in PraisonAI's recipe registry validates archive members against path traversal attacks but performs no checks on individual member sizes, cumulative extracted size, or member count before calling tar.extractall(). An attacker can publish a malicious recipe bundle containing highly compressible data (e.g., 10GB of zeros compressing to ~10MB) that exhausts the victim's disk when pulled via LocalRegistry.pull() or HttpRegistry.pull(). This vulnerability is fixed in 4.5.128.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mervinpraison | praisonai | < 4.5.128 | 4.5.128 |
| mervinpraison | praisonai | >= 0 < 4.5.128 | 4.5.128 |
| praison | praisonai | < 4.5.128 | 4.5.128 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
MervinPraison PraisonAI up to 4.5.127 _safe_extractall data amplification (GHSA-f2h6-7xfr-xm8w)
vuldb·2026-04-10·CVSS 6.5
CVE-2026-40148 [MEDIUM] MervinPraison PraisonAI up to 4.5.127 _safe_extractall data amplification (GHSA-f2h6-7xfr-xm8w)
A vulnerability has been found in MervinPraison PraisonAI up to 4.5.127 and classified as problematic. This affects the function _safe_extractall. Performing a manipulation results in highly compressed data.
This vulnerability was named CVE-2026-40148. The attack may be initiated remotely. There is no available exploit.
The affected component should be upgraded.
GHSA
PraisonAI Vulnerable to Decompression Bomb DoS via Recipe Bundle Extraction Without Size Limits
ghsa·2026-04-10
CVE-2026-40148 [MEDIUM] CWE-409 PraisonAI Vulnerable to Decompression Bomb DoS via Recipe Bundle Extraction Without Size Limits
PraisonAI Vulnerable to Decompression Bomb DoS via Recipe Bundle Extraction Without Size Limits
## Summary
The `_safe_extractall()` function in PraisonAI's recipe registry validates archive members against path traversal attacks but performs no checks on individual member sizes, cumulative extracted size, or member count before calling `tar.extractall()`. An attacker can publish a malicious recipe bundle containing highly compressible data (e.g., 10GB of zeros compressing to ~10MB) that exhausts the victim's disk when pulled via `LocalRegistry.pull()` or `HttpRegistry.pull()`.
## Details
The vulnerable function is `_safe_extractall()` at `src/praisonai/praisonai/recipe/registry.py:131-162`:
```python
def _safe_extractall(tar: tarfile.TarFile, dest_dir: Path) -> None:
dest_resolved = d
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-04-09
Published