CVE-2026-44340: Arbitrary File Write via Symlink Traversal in PraisonAI Tar Extraction Vulnerability ID: CVE-2026-44340 CVSS Score: 8.7 Published: 2026-05-11 PraisonAI versions prior to 4.6.37 contain a path traversal vulnerability in the _safe_extractall function. The flaw allows an attacker to write arbitrary files outside the intended extraction directory via maliciously crafted tar archives containing unresolved symbolic links. TL;DR A symlink-based path traversal in PraisonAI's recipe unpacking allows arbitrary file overwriting, potentially leading to remote code execution.…