Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5c3v-h6hw-4gx7

Опубликовано: 10 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 6.9
CVSS3: 5.3

Описание

PraisonAI before 4.6.78 contains a prompt injection defense bypass vulnerability where the injection defense only blocks threats classified as CRITICAL, requiring three or more detector families to match simultaneously. Attackers can craft single or double-vector prompt injections that are classified as HIGH threat level and pass through unblocked to reach the model.

PraisonAI before 4.6.78 contains a prompt injection defense bypass vulnerability where the injection defense only blocks threats classified as CRITICAL, requiring three or more detector families to match simultaneously. Attackers can craft single or double-vector prompt injections that are classified as HIGH threat level and pass through unblocked to reach the model.

EPSS

Процентиль: 13%
0.0022
Низкий

6.9 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-693

Связанные уязвимости

CVSS3: 5.3
nvd
около 1 месяца назад

PraisonAI before 4.6.78 contains a prompt injection defense bypass vulnerability where the injection defense only blocks threats classified as CRITICAL, requiring three or more detector families to match simultaneously. Attackers can craft single or double-vector prompt injections that are classified as HIGH threat level and pass through unblocked to reach the model.

EPSS

Процентиль: 13%
0.0022
Низкий

6.9 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-693