high7.5
CVE-2026-60085
PraisonAI before 4.6.78 contains an unenforced security policy vulnerability in the default Subprocess Sandbox backend where blocked_commands, blocked_paths, b…
Impact
PraisonAI before 4.6.78 contains an unenforced security policy vulnerability in the default Subprocess Sandbox backend where blocked_commands, blocked_paths, blocked_imports, allow_subprocess, and allow_file_write restrictions are completely ignored. Attackers can execute arbitrary subprocess commands, read sensitive files, and perform destructive operations despite explicit security policy configuration.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | praisonai | <= 4.6.77 | 4.6.78 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/advisories/GHSA-5r6c-gj4g-r697
- https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-5r6c-gj4g-r697
- https://nvd.nist.gov/vuln/detail/CVE-2026-60085
- https://nvd.nist.gov/vuln/detail/CVE-2026-62177
- https://www.vulncheck.com/advisories/praisonai-before-unenforced-security-policy-in-subprocess-sandbox