Vulnerability · Published Jul 11, 2026 · Assigned by VulnCheck

CVE-2026-61439PraisonAI before 4.6.78 Prompt Injection Defense Bypass

High 7.5

In plain English

A high-severity security flaw in PraisonAI from MervinPraison. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 28% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)0.3%top 72.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

PraisonAI versions before 4.6.78 contain a prompt injection defense misconfiguration where the block threshold defaults to CRITICAL severity, allowing HIGH-level threats to pass through unblocked. Attackers can submit single-vector prompt injection attacks such as instruction overrides or financial manipulation that trigger HIGH severity detection but are logged without blocking, enabling system prompt extraction and unauthorized tool invocations.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
PyPI	praisonai	4.6.78	GHSA-fj8f-m44g-c479
PyPI	praisonai	4.6.78	PYSEC-2026-4255

Affected products (as reported)

Vendor	Product	Versions
MervinPraison	PraisonAI	0 – before 4.6.78

Weakness: CWE-1188 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

GitHub Security Advisory (GHSA-fj8f-m44g-c479) vendor-advisory
VulnCheck Advisory: PraisonAI before 4.6.78 Prompt Injection Defense Bypass third-party-advisory