CVE-2026-60090 PraisonAI before 4.6.78 SQL/CQL Injection via vector dimension
Attackers can inject SQL or CQL commands via the dimension argument in PraisonAI's knowledge-store creation, potentially modifying or reading database contents.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-60090?
CVE-2026-60090 is a critical SQL injection vulnerability in MervinPraison PraisonAI, published on 11 Jul 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
PraisonAI before 4.6.78 fails to validate the caller-controlled dimension argument in the PGVector and Cassandra knowledge-store create_collection() backends. Although schema, keyspace, and collection-name identifiers are validated, the dimension value (declared as int but not enforced at runtime) is interpolated directly into the vector column of the generated CREATE TABLE DDL. A caller able to influence collection-creation dimensions can pass a string such as '3); DROP TABLE tenant_secrets; --' to inject SQL/CQL tokens into the statement executed by the database driver.
Weakness: CWE-89
Which versions are affected by CVE-2026-60090?
3 open source packages ship an affected version, including praisonai.
| Package | Affected | Fixed in |
|---|---|---|
praisonai PyPI | All versions | 4.6.78 |
praisonai PyPI | All versions | 4.6.78 |
praisonai PyPI | All versions | 4.6.78 |
How do I fix CVE-2026-60090?
Upgrade praisonai to 4.6.78 or later.
Use parameterised queries everywhere and never build SQL by joining strings. Upgrade affected software first; a web application firewall only buys time. More about SQL injection.
Is CVE-2026-60090 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-60090 exists.
Sources
Also known as GHSA-wf65-4jjx-q444, PYSEC-2026-4260.