CVE-2026-60085

PraisonAI before 4.6.78 contains an unenforced security policy in the default Subprocess Sandbox backend, causing blocked_commands, blocked_paths, blocked_imports, allow_subprocess, and allow_file_write to be ignored. This enables attackers to run arbitrary subprocess commands, read sensitive fil...

PT-2026-60133

Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.6.78 Description The default Subprocess Sandbox backend fails to enforce security policies. Specifically, restrictions defined in blocked commands, blocked paths, blocked imports, allow subprocess, and allow file...