PraisonAI is a multi-agent teams system. Prior to 1.5.113, The PraisonAI templates installation feature is vulnerable to a "Zip Slip" Arbitrary File Write attac…

PraisonAI, a multi-agent teams system, contains a Zip Slip vulnerability in versions prior to 1.5.113. The vulnerability exists in the templates installation feature where the application uses Python's zipfile.extractall() without proper validation when downloading and extracting template archives from external sources like GitHub. This allows for arbitrary file write attacks as files within archives can resolve outside the intended extraction directory. The vulnerability has been patched in version 1.5.113.