PT-2026-32596 · Praisonai · Praisonai

Choseogyeong

·

Published

2026-04-10

·

Updated

2026-05-09

·

CVE-2026-40315

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions PraisonAI versions prior to 4.5.133
Description An SQL identifier injection exists in SQLiteConversationStore where the table prefix configuration value is directly concatenated into SQL queries using f-strings without validation or sanitization. Because SQL identifiers cannot be safely parameterized, an attacker who can influence the table prefix value through configuration inputs such as from yaml or from dict can inject arbitrary SQL fragments. This allows for the alteration of query structures, enabling unauthorized data access, such as reading internal SQLite tables like sqlite master, and the manipulation of query results through techniques like UNION-based injection. The issue originates in config.py, propagates through factory.py via the create stores from config function, and reaches the sink in sqlite.py.
Recommendations Update to version 4.5.133.

Exploit

Fix

SQL injection

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-40315
GHSA-X783-XP3G-MQHP

Affected Products

Praisonai