CVE-2026-60086— PraisonAI before 4.6.78 Prompt Injection Defense Bypass
Possible ATT&CK Techniques 1AI
T1059 · Command and Scripting InterpreterAffected Version Matrix 2
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| MervinPraison | PraisonAI | < 4.6.78 | affected |
4.6.78 | unaffected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-60086
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
PraisonAI before 4.6.78 Prompt Injection Defense Bypass
Source: NVD (National Vulnerability Database)
Vulnerability Description
PraisonAI before 4.6.78 contains a prompt injection defense bypass vulnerability where the injection defense only blocks threats classified as CRITICAL, requiring three or more detector families to match simultaneously. Attackers can craft single or double-vector prompt injections that are classified as HIGH threat level and pass through unblocked to reach the model.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
保护机制失效
Source: NVD (National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| MervinPraison | PraisonAI | 0 ~ 4.6.78 | - |
II. Public POCs for CVE-2026-60086
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-60086
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-60086 (2)
Same Patch Batch · MervinPraison · 2026-07-10 · 9 CVEs total
| CVE-2026-61444 | 9.1 CRITICAL | PraisonAI before 4.6.78 Code Injection via f-string |
| CVE-2026-61434 | 8.8 HIGH | PraisonAI before 4.6.78 Allowlist Bypass via find -exec |
| CVE-2026-61437 | 7.8 HIGH | PraisonAI before 1.6.78 Remote Code Execution via tools.py |
| CVE-2026-60091 | 7.2 HIGH | PraisonAI before 4.6.78 Unauthenticated SSRF via webhook_url |
| CVE-2026-61441 | 6.5 MEDIUM | PraisonAI Platform before 0.1.9 Authorization Bypass via Dependencies |
| CVE-2026-61432 | 5.7 MEDIUM | PraisonAI FastContext before 1.6.78 Path Traversal |
| CVE-2026-60089 | 5.5 MEDIUM | PraisonAI before 1.6.78 Path Traversal via config.toml |
| CVE-2026-61431 | 5.5 MEDIUM | PraisonAI before 4.6.78 Path Traversal via ContextGatherer |
IV. Related Vulnerabilities
Same product: PraisonAI
- CVE-2026-61447
PraisonAI before 1.6.78 Remote Code Execution via CodeAgent - CVE-2026-61445
PraisonAI before 4.6.78 Arbitrary File Write and Command Exe - CVE-2026-61442
PraisonAI Platform before 0.1.9 Authorization Bypass via PAT - CVE-2026-61439
PraisonAI before 4.6.78 Prompt Injection Defense Bypass - CVE-2026-61429
PraisonAI before 1.6.78 SSRF via Crawl4AI Chromium backend
Same vendor: MervinPraison
- CVE-2026-61447
PraisonAI before 1.6.78 Remote Code Execution via CodeAgent - CVE-2026-61442
PraisonAI Platform before 0.1.9 Authorization Bypass via PAT - CVE-2026-61445
PraisonAI before 4.6.78 Arbitrary File Write and Command Exe - CVE-2026-61439
PraisonAI before 4.6.78 Prompt Injection Defense Bypass - CVE-2026-61428
PraisonAI AgentMail before 4.6.78 Message Injection via Webh
Same weakness: CWE-693
- CVE-2026-61437
PraisonAI before 1.6.78 Remote Code Execution via tools.py - CVE-2026-59854
SiYuan: Incomplete IsSensitivePath denylist: globalCopyFiles - CVE-2026-0278
Prisma Access Agent: Multiple DLP Policy Bypass Vulnerabilit - CVE-2026-59223
Open WebUI: `WEB_FETCH_FILTER_LIST` host allow/block filter - CVE-2026-59207
n8n: "Allowed HTTP Request Domains" Restriction Bypass via A
V. Comments for CVE-2026-60086
No comments yet