Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.3
CVE-2026-60090: PraisonAI before 4.6.78 allows SQL/CQL injection
CVE-2026-60090
Summary
PraisonAI's knowledge-store in versions before 4.6.78 fails to check user input, allowing malicious users to inject SQL or Cassandra Query Language (CQL) code. This could potentially allow them to access or delete sensitive data. Update PraisonAI to version 4.6.78 or later to fix this issue.
Original title
PraisonAI before 4.6.78 fails to validate the caller-controlled dimension argument in the PGVector and Cassandra knowledge-store create_collection() backends. Although schema, keyspace, and collect...
Original description
PraisonAI before 4.6.78 fails to validate the caller-controlled dimension argument in the PGVector and Cassandra knowledge-store create_collection() backends. Although schema, keyspace, and collection-name identifiers are validated, the dimension value (declared as int but not enforced at runtime) is interpolated directly into the vector column of the generated CREATE TABLE DDL. A caller able to influence collection-creation dimensions can pass a string such as '3); DROP TABLE tenant_secrets; --' to inject SQL/CQL tokens into the statement executed by the database driver.
nvd CVSS3.1
9.8
nvd CVSS4.0
9.3
Vulnerability type
CWE-89
SQL Injection
Published: 11 Jul 2026 · Updated: 20 Jul 2026 · First seen: 11 Jul 2026