CVE-2026-60090

Critical

Description

PraisonAI before 4.6.78 fails to validate the caller-controlled dimension argument in the PGVector and Cassandra knowledge-store create_collection() backends. Although schema, keyspace, and collection-name identifiers are validated, the dimension value (declared as int but not enforced at runtime) is interpolated directly into the vector column of the generated CREATE TABLE DDL. A caller able to influence collection-creation dimensions can pass a string such as '3); DROP TABLE tenant_secrets; --' to inject SQL/CQL tokens into the statement executed by the database driver.

SeverityCritical

CVSS9.8

Exploit probability—

ProductPraisonai

PublishedJul 11, 2026

First seenJul 11, 2026

Weakness typeCWE-89SQL injection

How to fix

Update

praisonai4.6.78 or later

Patches

github.com/MervinPraison/PraisonAI/commit/3aa9cbc2bd49c23a32be0a89a5e620d13d843eab

Vendor advisories

github.com/MervinPraison/PraisonAI/security/advisories/GHSA-wf65-4jjx-q444

Affected products

Product	Affected versions	Fixed in
praisonaiPyPI	v < 4.6.78	4.6.78

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.