CVE-2026-60090: PraisonAI Vulnerability in PGVector and Cassandra Knowledge Stores Leading to SQL/CQL Injection
Summary
CVE-2026-60090: PraisonAI: PGVector and Cassandra knowledge stores interpolate vector dimensions into DDL. Affects praisonai versions < 4.6.78. Fixed in 4.6.78. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
PraisonAI is an open-source framework designed for building AI applications, utilizing knowledge stores like PGVector and Cassandra for managing vector data. These knowledge stores facilitate efficient storage and retrieval of high-dimensional vectors, which are essential for tasks such as machine learning and data analysis. However, the framework has a vulnerability that allows for SQL/CQL injection through improper handling of user-controlled input in the dimension parameter during collection creation.
Vulnerability Detail
The vulnerability arises from the PGVector and Cassandra knowledge-store backends that directly interpolate user-controlled input into SQL/CQL commands without proper validation. Specifically, the 'dimension' argument in the 'create_collection()' method is not adequately checked, allowing an attacker to inject malicious SQL/CQL code. This can lead to severe consequences, including unauthorized data manipulation or destruction, as the attacker can execute arbitrary commands within the database context. The issue is classified under CWE-89 (SQL Injection) and CWE-943 (CQL Injection).
How To Fix
Latest published version: 4.7.16 as of 22 Oct 2026
pip install --upgrade "praisonai==4.7.16"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
4.6.78
This is the first release that contains the fix.
pip install --upgrade "praisonai==4.6.78"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, avoid exposing the 'create_collection()' method to untrusted users or sanitize the input for the 'dimension' parameter to ensure it only accepts valid integer values within the expected range.
Conclusion
The PraisonAI vulnerability CVE-2026-60090 highlights the importance of input validation in preventing SQL/CQL injection attacks. By updating to the patched version and implementing proper validation for user inputs, developers can secure their applications against potential exploits.
See every vulnerability recorded for praisonai →
FAQ
CVE-2026-60090 is a vulnerability in the PraisonAI framework that allows for SQL/CQL injection through improper handling of the dimension parameter in PGVector and Cassandra knowledge stores.
If exploited, this vulnerability can allow attackers to execute arbitrary SQL/CQL commands, potentially leading to data loss, corruption, or unauthorized access.
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which monitors and alerts for open-source vulnerabilities in real-time.
If you are using an affected version of PraisonAI, update to version 4.6.78 or later to mitigate the vulnerability.
Vulert is a tool that monitors open-source vulnerabilities in your software using just the Pipfile.lock, providing real-time alerts without requiring access to the code or installation.
References
Related vulnerabilities
Recent vulnerabilities recorded for praisonai.
