CVE-2026-60090: PraisonAI before 4.6.78 SQL/CQL Injection via vector dimension
PraisonAI before 4.6.78 fails to validate the caller-controlled dimension argument in the PGVector and Cassandra knowledge-store createcollection() backends. Although schema, keyspace, and collection-name identifiers are validated, the dimension value (declared as int but not enforced at runtime) is interpolated directly into the vector column of the generated CREATE TABLE DDL. A caller able to influence collection-creation dimensions can pass a string such as '3); DROP TABLE tenantsecrets; --' to inject SQL/CQL tokens into the statement executed by the database driver.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-60090?
The severity of CVE-2026-60090 is critical with a score of 9.3.
How do I fix CVE-2026-60090?
To fix CVE-2026-60090, upgrade PraisonAI to version 4.6.78 or later.
What type of vulnerability is CVE-2026-60090?
CVE-2026-60090 is an SQL/CQL Injection vulnerability.
What impact does CVE-2026-60090 have on data integrity?
CVE-2026-60090 can allow attackers to modify or access sensitive data through improper validation of user input.
Which versions of PraisonAI are affected by CVE-2026-60090?
All versions of PraisonAI before 4.6.78 are affected by CVE-2026-60090.