CVE-2026-60086: PraisonAI: Prompt-injection defense blocks only when 3+ detector families fire simultaneously; realistic single-vector injections pass through unblocked

PraisonAI’s opt-in prompt-injection defense (enable_injection_defense()) only blocks at ThreatLevel.CRITICAL, which requires three or more distinct detector families to match simultaneously. A realistic single- or double-vector prompt injection (e.g. “Ignore all previous instructions…”) is classified HIGH and passes through unmodified. The documented HIGH “sanitize” behavior is not implemented.