PraisonAI, a multi-agent teams system, contains a vulnerability in its template installation feature that allows files to be written outside the intended directory. The flaw arises from the use of Python's zipfile.extractall() on downloaded template archives without validating that the paths remain confined to the extraction directory. This issue can result in overwriting or creating files in unintended locations, which may compromise application integrity or confidentiality.

The vulnerability affects installations of MervinPraison PraisonAI up to and including version 1.5.112. Version 1.5.113 and later contain a fix that validates extraction paths.

The CVSS score of 8.1 indicates high severity. EPSS data is not provided and the vulnerability is not listed in the KEV catalog. Based on the description, it is inferred that an attacker who can supply a crafted template archive to the installer would be able to manipulate file paths and write to arbitrary locations. No complex prerequisites are required; the exploit would rely on the template installation mechanism, which is typically exposed for external source downloads. The limited available metrics do not express exploit probability, but the high‑severity score and straightforward exploitation path suggest a significant risk for unpatched deployments.