CVE-2026-61439
HIGHPraisonAI before 4.6.78 Prompt Injection Defense Bypass
Title source: cnaDescription
PraisonAI versions before 4.6.78 contain a prompt injection defense misconfiguration where the block threshold defaults to CRITICAL severity, allowing HIGH-level threats to pass through unblocked. Attackers can submit single-vector prompt injection attacks such as instruction overrides or financial manipulation that trigger HIGH severity detection but are logged without blocking, enabling system prompt extraction and unauthorized tool invocations.
References (2)
Core 2
Core References
Vendor Advisory vendor-advisory
GitHub Security Advisory (GHSA-fj8f-m44g-c479)
https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-fj8f-m44g-c479
Third Party Advisory third-party-advisory
VulnCheck Advisory: PraisonAI before 4.6.78 Prompt Injection Defense Bypass
https://www.vulncheck.com/advisories/praisonai-before-prompt-injection-defense-bypass
Scores
CVSS v3
7.5
EPSS
0.0026
EPSS Percentile
17.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-1188
Status
published
Products (2)
MervinPraison/PraisonAI
< 4.6.78
MervinPraison/PraisonAI
4.6.78
Published
Jul 11, 2026
Tracked Since
Jul 11, 2026