EN

en direct

CVE-2025-15662 · CVSS 8.6 CVE-2025-50455 · CVSS 9.1 CVE-2025-59172 · CVSS 8.5 CVE-2025-68686 · Fortinet FortiOS

type de faiblesse

CWE-273

1: vulnérabilité suivie
15 juillet 2026: dernière publication

cve

Veille des vulnérabilités

identifiantvulnérabilitésévéritépublié

CVE-2026-60085PraisonAI before 4.6.78 contains an unenforced security policy vulnerability in the default Subprocess Sandbox backend where blocked_commands, blocked_paths, blocked_imports, allow_subprocess, and allow_file_write restrictions are completely ignored. Attackers can execute arbitrary subprocess commands, read sensitive files, and perform destructive operations despite explicit security policy configuration. Élevée CVSS 7.5 15/07