HighVulnerabilityLLM-specific
CVE-2026-61439: PraisonAI prompt injection defense fails to block HIGH-level threats
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-61439
- Published
- Record updated
- Affected
- PraisonAI <= 4.6.77
- Fixed in
- 4.6.78
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.4%
Summary
PraisonAI versions before 4.6.78 default the prompt injection defense block threshold to CRITICAL severity, so HIGH-level threats pass through unblocked. Attackers can submit single-vector prompt injections, such as instruction overrides or financial manipulation, that are detected at HIGH severity and logged without being blocked, enabling system prompt extraction and unauthorized tool invocations. VulnCheck rates the issue CVSS 4.0 8.7 HIGH, and NVD has not yet provided an assessment.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Topics
Related items
- MediumVisual Studio Copilot and SSMS Remote Code Execution (CVE-2026-103572)Similar attack · Embrace The Red
- HighCVE-2026-110206: Roo Code command approval bypass in parseCommandLine() via command substitutionSimilar attack · NVD/CVE Database
- HighCVE-2026-110205: Roo Code command approval bypass through parseCommandLine() command substitutionSimilar attack · NVD/CVE Database
- HighCVE-2026-110204: Roo Code command approval bypass through parseCommandLine substitutionsSimilar attack · NVD/CVE Database
- HighCVE-2026-110203: Roo Code command approval bypass via quote-masking regexSimilar attack · NVD/CVE Database