CVE-2026-60086

PraisonAI before 4.6.78 contains a prompt injection defense bypass. The defense only blocks threats classified as CRITICAL and requires three or more detector families to match. Attackers can craft single- or double-vector prompt injections rated HIGH that pass through unblocked to reach the mode...