CVE-2026-61439: PraisonAI: Prompt Injection Defense Bypassed for HIGH-Level Threats

Injection Defense is a purpose-built prompt injection defense layer. It scans LLM inputs through six detection categories: instruction overrides, authority claims, boundary manipulation, obfuscation, financial manipulation, and self-harm instructions.

The defense is misconfigured by default. The block threshold defaults to Threat Level. CRITICAL, which is only reached when 3 or more detection checks fire simultaneously. A single-check match — including the explicitly flagged “dangerous” categories instruction override and financial manipulation — produces a HIGH severity result that is logged but never blocked.