{"data":{"id":"8df919e7-f82f-4846-9e0f-21f430993fb9","title":"CVE-2026-60086: PraisonAI before 4.6.78 contains a prompt injection defense bypass vulnerability where the injection defense only…","summary":"CVE-2026-60086 affects PraisonAI before 4.6.78. Its prompt injection defense only blocks threats classified as CRITICAL, which requires three or more detector families to match at once. Single or double-vector prompt injections rated HIGH pass through unblocked and reach the model.","solution":"N/A -- no mitigation discussed in source.","labels":["security","safety"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-60086","publishedAt":"2026-07-10T15:16:49.417Z","cveId":"CVE-2026-60086","cweIds":["CWE-693"],"cvssScore":"5.3","cvssSeverity":"medium","severity":"medium","attackType":["prompt_injection","jailbreak"],"issueType":"vulnerability","affectedPackages":["praisonai@<= 4.6.77 (fixed: 4.6.78)"],"affectedPackageNames":["praisonai"],"affectedPackageRefs":["pypi:praisonai"],"affectedVendors":[],"affectedVendorsRaw":["PraisonAI"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"PraisonAI prompt injection defense bypass via single or double-vector injections","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.0036,"epssCheckedAt":"2026-10-14T12:12:42.415Z","kevDateAdded":null,"advisoryAliases":["GHSA-4r3p-w3mc-5v34"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:46:52.560Z","patchAvailable":true,"disclosureDate":"2026-07-10T15:16:49.417Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["integrity","safety"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":["AML.T0051","AML.T0054"]}}