PT-2026-32596 · Praisonai · Praisonai
Choseogyeong
·
Published
2026-04-10
·
Updated
2026-05-09
·
CVE-2026-40315
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
PraisonAI versions prior to 4.5.133
Description
An SQL identifier injection exists in SQLiteConversationStore where the
table prefix configuration value is directly concatenated into SQL queries using f-strings without validation or sanitization. Because SQL identifiers cannot be safely parameterized, an attacker who can influence the table prefix value through configuration inputs such as from yaml or from dict can inject arbitrary SQL fragments. This allows for the alteration of query structures, enabling unauthorized data access, such as reading internal SQLite tables like sqlite master, and the manipulation of query results through techniques like UNION-based injection. The issue originates in config.py, propagates through factory.py via the create stores from config function, and reaches the sink in sqlite.py.Recommendations
Update to version 4.5.133.
Exploit
Fix
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Praisonai