CVE-2026-60086: PraisonAI before 4.6.78 contains a prompt injection defense bypass vulnerability where the injection defense only blocks

PraisonAI versions before 4.6.78 have a vulnerability where its defense against prompt injection (tricking an AI by hiding instructions in its input) is too weak. The defense only blocks attacks rated as CRITICAL threat level, but attackers can create single or double-vector attacks rated as HIGH threat level that slip through unblocked to reach the AI model.