CVE-2026-60085 describes an unenforced security policy vulnerability in MervinPraison's PraisonAI product prior to version 4.6.78. The default Subprocess Sandbox backend fails to enforce restrictions such as blocked_commands, blocked_paths, blocked_imports, allow_subprocess, and allow_file_write. As a result, attackers can execute arbitrary subprocess commands, access sensitive files, and perform destructive operations despite explicit security policy configurations intended to prevent such actions. The vulnerability has a CVSS 4.0 score of 8.7, indicating high severity. There is no vendor advisory or patch information available at this time, and no known exploits in the wild have been reported.

Attackers can bypass the intended security restrictions in the subprocess sandbox, enabling execution of arbitrary commands, unauthorized file reads, and destructive operations. This compromises system integrity and confidentiality by ignoring configured security policies.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting access to vulnerable PraisonAI instances and monitoring for suspicious subprocess activity where possible.