PraisonAI approval cache keyed only on tool name, ignoring arguments

Two vulnerabilities were disclosed in the PraisonAI agent framework: the approval cache was keyed only on tool name (CVE-2026-60087), so approving write_file to /tmp/safe.txt silently authorized a write to /etc/crontab, and SecurityPolicy.strict() never enforced its command, path and subprocess restrictions (CVE-2026-60085). Both are fixed in praisonaiagents 1.6.78 and praisonai 4.6.78.

• CVE-2026-60087: PraisonAI approval cache keyed on tool name only, arguments excluded
• Approving write_file to /tmp/safe.txt authorized a write to /etc/crontab without a new prompt
• CVE-2026-60085: SecurityPolicy.strict() never enforced command, path or subprocess limits
• Fixed in praisonaiagents 1.6.78 and praisonai 4.6.78