CVE-2026-60086

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.6.78

Description A prompt injection defense bypass exists because the system only blocks threats classified as CRITICAL, which requires three or more detector families to match simultaneously. This allows attackers to use single or double-vector prompt injections that are classified as HIGH threat level to bypass the defense and reach the model.

Recommendations Update PraisonAI to version 4.6.78 or later.