CVE-2026-60085 PraisonAI before 4.6.78 Unenforced Security Policy in Subprocess Sandbox
Attackers can bypass subprocess sandbox restrictions in PraisonAI to execute arbitrary commands and access sensitive files.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-60085?
CVE-2026-60085 is a high-severity vulnerability in MervinPraison PraisonAI, published on 15 Jul 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
PraisonAI before 4.6.78 contains an unenforced security policy vulnerability in the default Subprocess Sandbox backend where blocked_commands, blocked_paths, blocked_imports, allow_subprocess, and allow_file_write restrictions are completely ignored. Attackers can execute arbitrary subprocess commands, read sensitive files, and perform destructive operations despite explicit security policy configuration.
Weakness: CWE-273
Which versions are affected by CVE-2026-60085?
3 open source packages ship an affected version, including praisonai.
| Package | Affected | Fixed in |
|---|---|---|
praisonai PyPI | All versions | 4.6.78 |
praisonai PyPI | All versions | 4.6.78 |
praisonai PyPI | All versions | 4.6.78 |
How do I fix CVE-2026-60085?
Upgrade praisonai to 4.6.78 or later.
Is CVE-2026-60085 being exploited?
There is no known exploitation of CVE-2026-60085 in the wild and no public exploit code.
Sources
Also known as CVE-2026-62177, GHSA-5r6c-gj4g-r697, PYSEC-2026-4250.