CVE-2026-60085 Details
Description
PraisonAI before 4.6.78 contains an unenforced security policy vulnerability in the default Subprocess Sandbox backend where blocked_commands, blocked_paths, blocked_imports, allow_subprocess, and allow_file_write restrictions are completely ignored. Attackers can execute arbitrary subprocess commands, read sensitive files, and perform destructive operations despite explicit security policy configuration.
A vulnerability exists in PraisonAI versions prior to 4.6.78, where the default Subprocess Sandbox backend fails to enforce security policy restrictions. This includes ignored commands, paths, imports, and file write permissions. As a result, attackers can execute arbitrary subprocess commands, access sensitive files, and carry out destructive actions, regardless of the security policies set.
Users are advised to switch to the native backend (Landlock/Seatbelt) for untrusted code, which properly enforces security policies, or to update to PraisonAI version 4.6.78 or later, where this vulnerability has been addressed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jul 15, 2026CISA-ADP
Assessed Jul 15, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-5r6c-gj4g-r697 | [email protected] | AdvisoryTechnical AnalysisVendor |
| https://www.vulncheck.com/advisories/praisonai-before-unenforced-security-policy-in-subprocess-sandbox | [email protected] | Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-273 | Improper Check for Dropped Privileges | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| PraisonAI | <= 4.6.77 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 15, 2026 | CVE Modified | CISA-ADP |
| Jul 15, 2026 | New CVE Received | [email protected] |