CVE-2026-40148 | MervinPraison PraisonAI up to 4.5.127 _safe_extractall data amplification (GHSA-f2h6-7xfr-xm8w)

A vulnerability has been found in MervinPraison PraisonAI up to 4.5.127 and classified as problematic. This affects the function _safe_extractall. Performing a manipulation results in highly compressed data.

This vulnerability was named CVE-2026-40148. The attack may be initiated remotely. There is no available exploit.

The affected component should be upgraded.