Lhmisme420

**Name of the Vulnerable Software and Affected Versions** PraisonAI versions prior to 4.6.78 **Description** The default Subprocess Sandbox backend fails to enforce security policies. Specifically, restrictions defined in `blocked commands`, `blocked paths`, `blocked imports`, `allow subprocess`, and `allow file write` are ignored. This allows attackers to execute arbitrary subprocess commands, read sensitive files, and perform destructive operations regardless of the security policy configuration. **Recommendations** Update PraisonAI to version 4.6.78 or later.