https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T18:59:35.368340+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-60086 CVE-2026-60086 — PraisonAI before 4.6.78 Prompt Injection Defense Bypass 2026-10-07T18:59:35.384202+00:00

Affected: MervinPraison PraisonAI

PraisonAI before 4.6.78 contains a prompt injection defense bypass vulnerability where the injection defense only blocks threats classified as CRITICAL, requiring three or more detector families to match simultaneously. Attackers can craft single or double-vector prompt injections that are classified as HIGH threat level and pass through unblocked to reach the model.