CVE-2026-39306 | MervinPraison PraisonAI up to 4.5.112 Recipe Registry Pull path traversal

A vulnerability classified as critical has been found in MervinPraison PraisonAI up to 4.5.112. This issue affects some unknown processing of the component Recipe Registry Pull Handler. This manipulation causes path traversal.

This vulnerability is handled as CVE-2026-39306. The attack can be initiated remotely. There is not any exploit available.

It is recommended to upgrade the affected component.